Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. 2019/03/10 05:40:58 fuzzer started syzkaller login: [ 50.979850][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 50.979866][ T26] audit: type=1400 audit(1552196458.194:36): avc: denied { map } for pid=8051 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/03/10 05:41:00 dialing manager at 10.128.0.26:42819 2019/03/10 05:41:01 syscalls: 1 2019/03/10 05:41:01 code coverage: enabled 2019/03/10 05:41:01 comparison tracing: enabled 2019/03/10 05:41:01 extra coverage: extra coverage is not supported by the kernel 2019/03/10 05:41:01 setuid sandbox: enabled 2019/03/10 05:41:01 namespace sandbox: enabled 2019/03/10 05:41:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/10 05:41:01 fault injection: enabled 2019/03/10 05:41:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/10 05:41:01 net packet injection: enabled 2019/03/10 05:41:01 net device setup: enabled 05:43:42 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffff8000, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x2000000000000}}, 0x18) write$selinux_context(r0, &(0x7f0000000100)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000180)={0x8000, "148b08552bb61b0801407a2cfd35c11a436716f558841baccb95e3d6ecbf4e34", 0x1}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x200) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') prctl$PR_GET_TIMERSLACK(0x1e) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x2, 0xbd, 0x3, 0xdb00, 0x4, r2, 0x6}, 0x2c) bind$unix(r0, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000400)=0x2, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb1cc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x787}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000600)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000640)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x1}) r5 = fcntl$dupfd(r1, 0x406, r3) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000680)={[0x800, 0x3, 0xfffffffffffffff8, 0x4, 0x190, 0x7fffffff, 0x0, 0x5, 0x3c, 0x7, 0x7ff, 0x2, 0x8, 0xfffffffffffffff7, 0x2, 0x15], 0x14000}) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000740)=0xffffffff) uselib(&(0x7f0000000780)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@dev, @in=@initdev}}, {{@in=@local}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) syz_open_dev$rtc(&(0x7f0000000900)='/dev/rtc#\x00', 0x0, 0x280800) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000940)={0x7fff, 0xf, 0x4, 0x70000, {0x77359400}, {0x4, 0xe, 0x9eb, 0x1000, 0x7, 0x1, "1a9b8e6e"}, 0x40, 0x3, @userptr=0x78cf, 0x4}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f00000009c0)={0xffffffffffffffff, 0x1, 0x6, 0x3, 0x6}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000a00)=0x200000) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000a80)={0x5000, &(0x7f0000000a40), 0x8, r0, 0x4}) [ 214.982979][ T26] audit: type=1400 audit(1552196622.194:37): avc: denied { map } for pid=8065 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14862 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 215.073150][ T8066] IPVS: ftp: loaded support on port[0] = 21 [ 215.177527][ T8066] chnl_net:caif_netlink_parms(): no params data found 05:43:42 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/74}) write$FUSE_POLL(r0, &(0x7f0000000180)={0x18, 0xffffffffffffffff, 0x6, {0xea}}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x42089522}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x1800000000}}}, &(0x7f00000003c0)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={r3, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000440)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)={r5, 0x74b, 0x8, [0x7, 0x0, 0x3ff, 0x1, 0xca3, 0x2, 0x5, 0xf4]}, 0x18) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000540)=0x7, 0x4) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000580)=""/44, &(0x7f00000005c0)=0x2c) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/attr/exec\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x408, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ashmem\x00', 0x200000, 0x0) lsetxattr$security_smack_transmute(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000840)='TRUE', 0x4, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000880)=@assoc_value={r4}, &(0x7f00000008c0)=0x8) fcntl$setsig(r7, 0xa, 0x3e) getcwd(&(0x7f0000000900)=""/119, 0x77) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000980)={r9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000009c0)={r9, 0x2, 0xa, [0x4, 0x99, 0x32f, 0x2, 0x1000000020000, 0x0, 0x5, 0x9, 0x9, 0x4]}, 0x1c) getsockname$llc(r6, &(0x7f0000000a00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000a40)=0x10) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000a80)={0x10001, "9b9ba6655e9fccea1b333c8311e66e048294d29cad5fcf761beb69bf59fe5a71", 0x1, 0x1}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/audio\x00', 0x101000, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000b80)={0x0, 0x0, [], @bt={0x0, 0x8, 0x3, 0x20, 0x2, 0x1800000000000000, 0x2, 0xd}}) write$FUSE_STATFS(r10, &(0x7f0000000c40)={0x60, 0x0, 0x6, {{0x303d, 0x5b33, 0x0, 0x80, 0x1, 0x8000, 0x3, 0x8001}}}, 0x60) [ 215.223582][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.231919][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.240270][ T8066] device bridge_slave_0 entered promiscuous mode [ 215.249301][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.256642][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.265112][ T8066] device bridge_slave_1 entered promiscuous mode [ 215.287590][ T8066] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.297699][ T8066] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.319705][ T8066] team0: Port device team_slave_0 added [ 215.327292][ T8066] team0: Port device team_slave_1 added [ 215.387698][ T8066] device hsr_slave_0 entered promiscuous mode [ 215.426136][ T8066] device hsr_slave_1 entered promiscuous mode 05:43:42 executing program 2: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffff9c, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x3, 0x2}, 0x10) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x84000, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2ac, r1, 0x800, 0x70bd25, 0x2, {}, [@TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec6c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x390}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x939}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x363}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x1}, 0x4000850) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="47d9e982da07cb86b6e1c7e52333d91e9c3a12bce466d81733eded284fdef77d2c7708da39d76ec1b920616bb24d2bb91f62c67a4b7ae0595576b75208f3db8275c8c09840bb162fddedde8f77f5c77126e8cffb3aef241d0e2c9fb9ebd1869779a162af3e7043986d527863663c3a368d585b239ec568e9917d7466cd8d6f62fa2166696519ff87669d40d7f7dff8e69b3edc49a12ec007dbe5a7eea215dfa7d757f95a6c23760db0271b36d7bf7821a6334dc9fdcca0984e2c44ba98620f17587c35ba474991cbac5b680f1762", 0xce) r2 = openat$cgroup_ro(r0, &(0x7f0000000580)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, [0x8, 0x81, 0x8, 0x800, 0x8, 0x20, 0x1, 0x5, 0x8, 0x5, 0x6, 0x0, 0x0, 0x7fffffff, 0xf2f8]}, &(0x7f00000006c0)=0x100) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r3, 0x6, 0x1}, 0xc) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x4801c0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000780)={r3, 0x68, "8a742b24b38a3350fae96cec35c26b3344760c0bfdb4a9cbb2c6d4960d460e434ff2c7992a364811f75d5c690b32cb611fd660df26a70c898af3f0583d3578ee4e90ba82fc6b7de4124bb184ea095297874530967178fd58647dec22b5ab341fe9511e25d6c1175c"}, &(0x7f0000000800)=0x70) getsockopt$inet_dccp_int(r4, 0x21, 0x17, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000008c0)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000900)) r6 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key(&(0x7f0000000a40)='syzkaller\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000ac0), 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f00000009c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '(-proc@!\xc7+procem1:selinux/vmnet0)vboxnet1vboxnet0nodev&/}ppp1'}, 0x56, r7) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) write$P9_ROPEN(r2, &(0x7f0000000b80)={0x18, 0x71, 0x1, {{0x40, 0x1, 0x2}, 0x600000}}, 0x18) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000bc0)=0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c00)={r5}, 0x8) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000c40)='syzkaller0\x00') prctl$PR_SET_KEEPCAPS(0x8, 0x1) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000c80)=0x4, &(0x7f0000000cc0)=0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000d00)={r5, @in={{0x2, 0x4e23, @multicast2}}, [0x2, 0xba46, 0x8, 0x9, 0x3, 0x80000001, 0x9, 0x1, 0x400, 0x80, 0x4, 0x7ff, 0x0, 0x800, 0x80000001]}, &(0x7f0000000e00)=0x100) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000e40)={0x10000, 0x0, [0xffffffff, 0x100000001, 0x8, 0xfc7, 0x0, 0x200, 0x6, 0x5]}) getpeername$llc(r0, &(0x7f0000000ec0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000f00)=0x10) [ 215.472763][ T8069] IPVS: ftp: loaded support on port[0] = 21 [ 215.499271][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.507040][ T8066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.514656][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.521780][ T8066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.663313][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.679148][ T8071] IPVS: ftp: loaded support on port[0] = 21 [ 215.699765][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.728614][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.747123][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.765954][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 05:43:43 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200100, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@bcast, @bcast, 0x5, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sync_file_range(r0, 0x80000000, 0x4, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x3, 0x30, 0x100, 0x400}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x6, @rand_addr="1f781201fe650776a65c899ae7b8472a", 0x626}}}, 0x84) recvfrom$rose(r0, &(0x7f0000000200)=""/251, 0xfb, 0x40002041, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r1, 0x81, 0x3, 0x2, 0x3, 0x0, 0x3e3, 0x9, {r1, @in6={{0xa, 0x4e24, 0x2, @empty, 0xffffffffffff8001}}, 0x1000, 0x101, 0x6, 0x5, 0x400}}, &(0x7f0000000400)=0xb0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000440)=""/172) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000700)={0x8, 0x9, 0x3, 0x0, 0x4, [{0x10000, 0x3, 0x2, 0x0, 0x0, 0x288}, {0x0, 0x40, 0x9, 0x0, 0x0, 0x210d}, {0x1ff, 0x7, 0xffffffff7fffffff, 0x0, 0x0, 0x800}, {0x1, 0x7, 0xffffffff, 0x0, 0x0, 0x100}]}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000800)) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000008c0)={@empty}, &(0x7f0000000900)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000940)={r2, 0x8001, 0x6, [0x7, 0x6, 0x400, 0x6, 0x2, 0x2]}, 0x14) rt_sigpending(&(0x7f0000000980), 0x8) sendmsg$can_raw(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x1d, r4}, 0x10, &(0x7f0000000a40)={&(0x7f0000000a00)=@can={{0x1, 0x7ff, 0x7, 0xa}, 0x3, 0x1, 0x0, 0x0, "468f778de66c87d0"}, 0x10}}, 0x4004800) recvfrom$rose(r0, &(0x7f0000000ac0)=""/51, 0x33, 0x40000000, &(0x7f0000000b00)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) connect$rose(r3, &(0x7f0000000b40)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000c00)={r1, 0x64, &(0x7f0000000b80)=[@in6={0xa, 0x4e22, 0x7, @rand_addr="8c642d45eecda794e92a97911125d7ee", 0x7f}, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e21, 0x3, @local, 0x7}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000c40)=0x10) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000c80)={0x2}) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000d00)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={r0, 0x1, 0x1, 0x0, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) write$P9_RUNLINKAT(r0, &(0x7f0000000e40)={0x7, 0x4d, 0x2}, 0x7) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000f00)={0xa, &(0x7f0000000e80)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000f40)={r6, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000fc0)={r5, 0x38, &(0x7f0000000f80)=[@in6={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x200}, @in6={0xa, 0x4e21, 0x80000001, @empty, 0x3}]}, &(0x7f0000001000)=0x10) syz_genetlink_get_family_id$team(&(0x7f0000001040)='team\x00') ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000001080)=""/17) [ 215.782120][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.808174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.818629][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.825741][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.862490][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.872658][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.879774][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.901181][ T8069] chnl_net:caif_netlink_parms(): no params data found [ 215.928619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.937784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.948431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.965407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.990020][ T8066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.002133][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.028111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.041476][ T8076] IPVS: ftp: loaded support on port[0] = 21 05:43:43 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x1a, r2, 0x1, 0x1e, 0x6, @local}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, [], 0x23}, 0x7ff}}, 0xaa8b, 0x8001}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x8000, 0x8000, 0x9, 0x2445eb4e, 0x2}, 0x14) truncate(&(0x7f0000000240)='./file0\x00', 0x4) fsetxattr$security_evm(r0, &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@v2={0x5, 0x2, 0x1, 0xe0d, 0x85, "af3f920ceb832e2c29512bd8d7d5fa1cd3d2873ec9eb4fc765a5ec212c2d838c0b03ce4a9cbc8e42f9fa9412f012114967d6f5189d6742fe5f7aaff2516e1f4e05108f429b15aee8cdac4e0968e9734201a5d858c24d5ebcdd45f21cd6dd4bed4363c71c620dc5d5ca996a6d91abadc0b5c756601f9a0573648706bbd649e2e519afefe308"}, 0x8f, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f00000003c0)) prctl$PR_SVE_SET_VL(0x32, 0x1d5a) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000400)=0x119401, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000440)=0x20, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000480)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000004c0)=0x400) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000500)={0x9, {{0xa, 0x4e23, 0xffffffff, @rand_addr="ab1390c9c9bae5ad6fc785062e0d501e", 0x80000000}}}, 0x88) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, {0x67, 0xc2fc, 0x3010, 0x9, 0x9, 0x3}}) io_setup(0x80, &(0x7f0000000640)=0x0) io_cancel(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000680)="19fbefb2865dbaf320237704287c2d9b2c15e235005886a9e95a10ed41e6b42044d28b4af9623c21b466e4284c1106800cdf2a84fdcdf9f328fd664dcd21c43055ca1c8469d10e7d20d129b04ddc88b52547f4eb102fdd88d195f3649faa86f52d6d9dfb9cf69e39f76259075dde83f47170ce9d2ede467917b582777631a1be52394255d09e40dbc55ac999d198ae8589a2499142b2cc32bc01e1729251b7313576f42105f88e692db6acbaabe076709e554ab6c166ff02369df0e193000775f3de5c169d91af9c5184f9af54c889f1188398a05c3a097b5be2009289cdfcfa65", 0xe1, 0x400, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f00000007c0)) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000800)={0x555, 0x800}) accept$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f00000008c0)) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ubi_ctrl\x00', 0xb0200, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000940)=0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffffffffffff) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() lstat(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='fuse\x00', 0x40, &(0x7f0000000bc0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@allow_other='allow_other'}], [{@smackfshat={'smackfshat', 0x3d, 'mime_type'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}}'}}, {@fowner_gt={'fowner>', r9}}, {@permit_directio='permit_directio'}, {@hash='hash'}]}}) openat(r6, &(0x7f0000000cc0)='./file0/../file0\x00', 0x80, 0x31) [ 216.123223][ T8066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.132005][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.139485][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.147551][ T8069] device bridge_slave_0 entered promiscuous mode [ 216.208844][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.210169][ T26] audit: type=1400 audit(1552196623.424:38): avc: denied { associate } for pid=8066 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 216.235228][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.260318][ T8069] device bridge_slave_1 entered promiscuous mode [ 216.347948][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 216.381768][ T8069] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.428216][ T26] audit: type=1400 audit(1552196623.644:39): avc: denied { map_create } for pid=8080 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 216.466003][ T8069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.502730][ T26] audit: type=1400 audit(1552196623.644:40): avc: denied { create } for pid=8080 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 05:43:43 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0x0, 0x3f000000, 0x0, 0x55efff7f]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) [ 216.532964][ T26] audit: type=1400 audit(1552196623.644:41): avc: denied { write } for pid=8080 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 05:43:43 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000000c0)={0x0, @aes256}) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x8001, 0x40b704, "34b22cc3199b8e9cbeaf2919ef09fe06d351f337a9c04df4", {0x8, 0x6}, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x8001001, 0x0, 0x3}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r3, 0x7}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0xd6, 0x6}, 'port0\x00', 0xf3f157294a5b65eb, 0x1000, 0x7, 0xe64, 0x1ff, 0x0, 0xfcae, 0x0, 0x7, 0xad}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'caif0\x00', 0x2}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa5}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x34f}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e22, @multicast2}}, 0x200, 0xe69, 0x8, 0xe98, 0x80000001}, &(0x7f0000000680)=0x98) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000006c0)=0x1, 0x4) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000700)={0x5, 0x100000000}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000740)={0x7, 0xc000c, "782dc735cf693e6c02f1979fc35f535237d1d637da1a0ede", {0x80, 0x6}, 0x20}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000780)={0x7ff, 0x5, 0x1, 0x0, 0x0, [{r2, 0x0, 0x1}]}) statfs(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=""/240) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000900)=[@timestamp, @mss={0x2, 0x1}, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0x90}], 0x6) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000940)=0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0xe8) r7 = getuid() mount$9p_rdma(&(0x7f0000000980)='127.0.0.1\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='9p\x00', 0x400, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@loose='loose'}, {@rq={'rq', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x1000000000000}}, {@rq={'rq', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0xf3d}}, {@timeout={'timeout', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x2}}, {@common=@access_uid={'access', 0x3d, r6}}, {@common=@nodevmap='nodevmap'}], [{@subj_user={'subj_user', 0x3d, 'vmnet0'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%posix_acl_access!+\xb1-'}}, {@subj_user={'subj_user', 0x3d, '\xe7eth0'}}, {@obj_type={'obj_type', 0x3d, '/dev/cec#\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000d40)=""/201, &(0x7f0000000e40)=0xc9) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000e80)={0xfffffffffffffffe, 0x5, 0x8008, 0x0, 0x1000, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, r5}, 0x20) sync_file_range(r2, 0x0, 0x4, 0x6) 05:43:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, 0x0, 0x0, &(0x7f0000915ffc), 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gretap0\x00', 0x0}) r4 = accept$packet(r0, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001d80)=0x14) getsockname(r2, &(0x7f0000001dc0)=@xdp, &(0x7f0000001e40)=0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001e80)={'yam0\x00', r3}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001ec0)={{{@in6=@dev, @in=@local}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000001fc0)=0xe8) r5 = accept$packet(r2, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003280)=0x14) accept4$packet(r2, &(0x7f0000007740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x80000) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = accept(r2, &(0x7f00000078c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007940)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000007ac0)={{{@in6=@loopback, @in6=@empty}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000007c40)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000007d80)={{{@in=@remote, @in=@empty}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000007e80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000007f40)={{{@in=@multicast2}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@mcast1}}, &(0x7f0000008040)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000008080)={@mcast2}, &(0x7f0000000180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000008100)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000008200)=0xe8) getpeername$packet(r1, &(0x7f0000008240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000082c0)={'team0\x00'}) accept4$packet(r2, &(0x7f0000008480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000084c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000008640)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008680)={{{@in=@broadcast, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000008780)=0xe8) read(r1, &(0x7f0000009f9c)=""/100, 0x64) ioctl$int_in(r4, 0x5473, &(0x7f0000000080)=0xf179) [ 216.600921][ T8082] IPVS: ftp: loaded support on port[0] = 21 [ 216.609423][ T26] audit: type=1400 audit(1552196623.644:42): avc: denied { read } for pid=8080 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 216.718807][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 216.739383][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.749463][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.757752][ T8071] device bridge_slave_0 entered promiscuous mode [ 216.766597][ C1] hrtimer: interrupt took 35051 ns [ 216.772950][ T8069] team0: Port device team_slave_0 added [ 216.798219][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.806559][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.819338][ T8071] device bridge_slave_1 entered promiscuous mode [ 216.843001][ T8069] team0: Port device team_slave_1 added [ 216.887326][ T8071] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.936276][ T8094] IPVS: ftp: loaded support on port[0] = 21 [ 216.947839][ T8071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.018015][ T8069] device hsr_slave_0 entered promiscuous mode [ 217.055017][ T8069] device hsr_slave_1 entered promiscuous mode [ 217.157443][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.164585][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.172695][ T8076] device bridge_slave_0 entered promiscuous mode [ 217.188241][ T8071] team0: Port device team_slave_0 added [ 217.195867][ T8071] team0: Port device team_slave_1 added [ 217.202329][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.210744][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.218688][ T8076] device bridge_slave_1 entered promiscuous mode [ 217.246186][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 217.280723][ T8076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.291684][ T8076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.340955][ T8076] team0: Port device team_slave_0 added [ 217.377725][ T8071] device hsr_slave_0 entered promiscuous mode [ 217.415113][ T8071] device hsr_slave_1 entered promiscuous mode [ 217.464476][ T8076] team0: Port device team_slave_1 added [ 217.482681][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.491913][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.499718][ T8082] device bridge_slave_0 entered promiscuous mode [ 217.508033][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.515955][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.523806][ T8082] device bridge_slave_1 entered promiscuous mode [ 217.571908][ T8082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.601509][ T8082] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.703342][ T8076] device hsr_slave_0 entered promiscuous mode [ 217.748476][ T8076] device hsr_slave_1 entered promiscuous mode 05:43:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, 0x0, 0x0, &(0x7f0000915ffc), 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gretap0\x00', 0x0}) r4 = accept$packet(r0, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001d80)=0x14) getsockname(r2, &(0x7f0000001dc0)=@xdp, &(0x7f0000001e40)=0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001e80)={'yam0\x00', r3}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001ec0)={{{@in6=@dev, @in=@local}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000001fc0)=0xe8) r5 = accept$packet(r2, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003280)=0x14) accept4$packet(r2, &(0x7f0000007740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x80000) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = accept(r2, &(0x7f00000078c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007940)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000007ac0)={{{@in6=@loopback, @in6=@empty}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000007c40)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000007d80)={{{@in=@remote, @in=@empty}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000007e80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000007f40)={{{@in=@multicast2}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@mcast1}}, &(0x7f0000008040)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000008080)={@mcast2}, &(0x7f0000000180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000008100)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000008200)=0xe8) getpeername$packet(r1, &(0x7f0000008240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000082c0)={'team0\x00'}) accept4$packet(r2, &(0x7f0000008480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000084c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000008640)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008680)={{{@in=@broadcast, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000008780)=0xe8) read(r1, &(0x7f0000009f9c)=""/100, 0x64) ioctl$int_in(r4, 0x5473, &(0x7f0000000080)=0xf179) [ 217.816504][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 217.852603][ T8082] team0: Port device team_slave_0 added [ 217.893340][ T8082] team0: Port device team_slave_1 added [ 217.936999][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.960017][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 05:43:45 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8040, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x8) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x8000000) [ 218.001379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.009244][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.023937][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 05:43:45 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='s(\xeb\xa5ja\x16+B7\xe0:[,\xf9\xa1\x88taTm\x00\xe30\'m\x19\xe1g\xe4\xbfX\x83\x8aH\xbc\xfcf\x11%\xb9:\f\xf1\x00\xa5\x1c\xf0\xcc\xd1\xf0}e:\xc1$\x19\x98*\x0f\xbb!r@\xdb\xfc\x99\n\xde\xd6\xfbr\x12\xc12\xea\x1b\xfa\xd7P8\x12\xda^4\xa8H\xbb\xfa\x83\xf17\xa7\xda\xbf\xd9\x01\xa5\x00\x1b\xadOAj\xe7\xe4jX\x05^^m6>\f\x9a\x93\x8a\x83\xd4\xc8f\xf8|R\x90\xa5N\x9a$\xe3\xad5\x00\xad\b\x99\x9f\xc3\x1c\xe1\x04\xb0\xdfP1p\xad-\xefT') r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="4dbc080722b2a6cf26a90701"], 0xc) lsetxattr(&(0x7f0000000900)='./bus\x00', &(0x7f0000000940)=@known='trusted.syz\x00', &(0x7f0000000980)='\x00', 0x1, 0x2) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) syz_open_procfs(r0, &(0x7f0000000780)='stack\x00') sendmsg$inet_sctp(r3, &(0x7f00000004c0)={&(0x7f0000000100)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f00000005c0)="d6be86ec09265fe6c2754ad4aff617d1d9e0a18931ab6ba01e517f54f10aab74665ebebab2f18d61cda7a5c404df4c3abc51398dba0852d7fe2366b310f904adb4ffe5a79fc377f5846e242bed7d5e01bf34b3adeafebe84804790254fdb32d8068b3bfa10f0a39e34dceb6435e8c2701fdbfc44921341ed5a2c8dfea1a09c752a04a792764e5dc1abe56b5f1808922651f00bf775d29cde21d664dcfd881740fd66935f472fe46321ab207344a5c79c236a82d5b5b00fde5c573b21fc1228ee5f04e02497017a9bad2a4a7536bd1878deecedd40d4a1c0a9199c4500038c1167d0b8d3b6f92db0761cde173c37e4f4316922f72", 0xf4}], 0x1, 0x0, 0x0, 0x80}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) lsetxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)=@random={'btrfs.', 's(\xeb\xa5ja\x16+B7\xe0:[,\xf9\xa1\x88taTm\x00\xe30\'m\x19\xe1g\xe4\xbfX\x83\x8aH\xbc\xfcf\x11%\xb9:\f\xf1\x00\xa5\x1c\xf0\xcc\xd1\xf0}e:\xc1$\x19\x98*\x0f\xbb!r@\xdb\xfc\x99\n\xde\xd6\xfbr\x12\xc12\xea\x1b\xfa\xd7P8\x12\xda^4\xa8H\xbb\xfa\x83\xf17\xa7\xda\xbf\xd9\x01\xa5\x00\x1b\xadOAj\xe7\xe4jX\x05^^m6>\f\x9a\x93\x8a\x83\xd4\xc8f\xf8|R\x90\xa5N\x9a$\xe3\xad5\x00\xad\b\x99\x9f\xc3\x1c\xe1\x04\xb0\xdfP1p\xad-\xefT'}, &(0x7f00000002c0)='vboxnet0md5sum(#bdev\x00', 0x15, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000300)={0x80000000000000, 0xd000, 0x1f, 0x3, 0x17}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r5, 0x80400003, 0xf7}, 0x199) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x400, &(0x7f0000000800)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5c}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@smackfsroot={'smackfsroot', 0x3d, 'em1'}}]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ptmx\x00', 0x8001, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r4, 0x0) [ 218.067383][ T8082] device hsr_slave_0 entered promiscuous mode [ 218.105295][ T8082] device hsr_slave_1 entered promiscuous mode [ 218.145512][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.152575][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.160869][ T8094] device bridge_slave_0 entered promiscuous mode [ 218.183350][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.191925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.200966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.208076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.216342][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.224212][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.234570][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.248426][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.258402][ T8094] device bridge_slave_1 entered promiscuous mode [ 218.280276][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.290361][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.302830][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.314581][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.321723][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.336152][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.358412][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.394207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.404618][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.413322][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.420466][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.429329][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.438432][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:43:45 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2051, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0xba3cc8ee8d0c95d) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400) [ 218.466071][ T8094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.480308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.490714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.499383][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.508624][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.542336][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.560567][ T8094] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:43:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8001000000002c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x80, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe14) [ 218.570178][ T26] audit: type=1400 audit(1552196625.774:43): avc: denied { map } for pid=8121 comm="syz-executor.0" path="socket:[27540]" dev="sockfs" ino=27540 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 218.615975][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.623774][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.633569][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.642160][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.649283][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.663292][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.672162][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.681220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.689992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.722543][ T8076] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.743445][ T8094] team0: Port device team_slave_0 added [ 218.750726][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.759652][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.768800][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.777394][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.786131][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.794238][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.802459][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.809980][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.817801][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.826588][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.834939][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.841975][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.849778][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.858299][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.866751][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.873793][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.881347][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.889802][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.897688][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.909266][ T8069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.920665][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.939218][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.947457][ T8094] team0: Port device team_slave_1 added [ 218.954020][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.962516][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.971072][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.979856][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.988763][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.997182][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.008288][ T8071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.019648][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.046528][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.053298][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.061668][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.070376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.079080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.087640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.095474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.117306][ T8076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.128085][ T8076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.177656][ T8094] device hsr_slave_0 entered promiscuous mode [ 219.217803][ T8094] device hsr_slave_1 entered promiscuous mode [ 219.265250][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.273481][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.281779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.289976][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.298413][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.306894][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.315334][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.322364][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.331140][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.338799][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.363897][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.372169][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.381911][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.390512][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.397604][ T8098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.406378][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.420092][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.454249][ T8076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.468620][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.478095][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.486834][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.538084][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.562918][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.621401][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.649352][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.664681][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.685373][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.699831][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.709629][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.728516][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.748588][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.761940][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 05:43:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000880)='/dev/vcs#\x00', 0x87, 0x0) read$eventfd(r0, &(0x7f0000000900), 0x479) 05:43:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) vmsplice(r0, &(0x7f0000000900)=[{&(0x7f00000003c0)="4f6f864d05643ff8efbbc187112b730c387ed533a4c1a9a730dde71f063a826feca13ccbd861af5a0f06497b2afc058cd65ac41ad8b98354c32b89c7780f9667819286c7d26cbb7b553cfe9a816f8ecaa4a8b0a812924c52282a0896a65b5d494c38654a6c1325516a3a89050c465ab06ef454da5655e5f6c4663ba3387d5dbc96705001d6e220ae3d82623276e57f17939ef5e4895fa04aeae4855a6384a200fef8b597875cfddf7c41b1898ba0d184da04ce3e649c7cbbe636b6a1da5ef6dd67976ccc081c707fee371dd62c0558a675fc500af166463d0f8e133ea094ccc37c83e656", 0xe4}, {&(0x7f00000004c0)="015cc2129830154ff40395ad203d04e9f2e9c9fe7ce41f88a95312168ada0eb1352bc5944f8161a7f60c9db085320204e25bc99bb6b11b7a05df0de4eb1f1538f2a192a676", 0x45}, {&(0x7f0000000540)="ed285f6496770c445ea7dd6bcaf225aa3281e05a9d37eb3663f5932e10df4481b9ec481fd485a2a34b1117bba420696fcff0d981aa063876aafa24eae57e6fb5e8c8a108c76789c8aac86aea8a96821cdee6a19c5391df2200dde8dc084150b731b4c7f6531084f9de8219c243e9f7abc95a87daff9f97275946ecd44d21541312d8be7afa1500737de6712a5a755e80c456d5733fba124393fb05a5ff31f631726cf15eb5c53f503ace955c559ac0478c6415578f44ad", 0xb7}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000700)="c8d23b1ad8da2b59fae1efe5f731b783f953f2d727711bc44cc8fc0a9c00a758408b84207c8382e337864e2b305ae13e", 0x30}, {&(0x7f0000000740)="4bcd4c", 0x3}, {&(0x7f0000000780)="1a7adb878d54e64057ac88b014c4eb7b954f7f0a0819946bf00052a8bc272b47723a8320070a653dd4ec454873", 0x2d}, {&(0x7f00000007c0)="44c7476e83c1c7d369c64474257889bfc343add37a345334a771cec1356ed9f9c8283da7f65ca28951e84a9955b431b12b3ba4a2813a2f58ef65d7ee0701ed9be4ed6d768bb51cdcd83a", 0x4a}, {&(0x7f0000000840)="d39348f4604478287a5a7790989991a382e30f146b63171166d525d4ae2246b22af4b536240896e4746e3301eb5e67660253057070d5e51a48a2fa0cb9beadf59155fe40a8b7a0e6f1d63ee92f34bf678fd91003b990c570a77f73b2cae7e3336205599978173e3d1d8cd11aa706e9003096be62c970888271d1b3b5e905e4d358f522f19992bf2c5f873dabc235bd39", 0x90}], 0x9, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) r2 = getegid() io_setup(0x1, &(0x7f0000000080)=0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x20040, 0x10) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000300)=""/65, 0x41}], 0x1) io_cancel(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x3f, r0, &(0x7f0000000200)="39bce08cc08f605af587df564b38bdb9b6b75c21a55a3dd0b5c7932e20f48c048e376fc195ef28a7d80bc5dcfc0dff47e12d8f6b933e6512e0893d1fa463", 0x3e, 0x7, 0x0, 0x2, r4}, &(0x7f00000002c0)) fchown(r0, r1, r2) [ 219.772468][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.779620][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state 05:43:47 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r0, r1) [ 219.843692][ T8082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.867908][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.885992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.893904][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.915799][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.924153][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.931257][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.939372][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.948197][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.957156][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.965887][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.972039][ T8153] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 219.973738][ T26] audit: type=1400 audit(1552196627.184:44): avc: denied { map } for pid=8151 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28722 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 219.974370][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.033534][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.043162][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.079243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.088320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.103637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.112095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.126395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.139936][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.167120][ T8094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.186942][ T8082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.264345][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0 05:43:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 05:43:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000100)="16", 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffff) fcntl$addseals(r2, 0x409, 0x8) 05:43:47 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:43:47 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r0, r1) 05:43:47 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r0, r1) 05:43:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x6]) 05:43:47 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x6]) 05:43:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x6]) 05:43:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e0000001d008183ad5de087185082cf0124b0eba0070000002339a00576f9835b3f00009148700000f85ac47c45", 0x2e}], 0x1}, 0x0) 05:43:47 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r0, r1) 05:43:47 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)) [ 220.730754][ T8199] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 05:43:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x6]) 05:43:48 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:43:48 executing program 4: semop(0x0, 0x0, 0x5a) 05:43:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) clone(0x2102801ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = getegid() getresgid(&(0x7f0000000340), 0x0, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) stat(0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000a00)={@mcast2}, 0x0) getresgid(&(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0, &(0x7f0000000940)) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x7}, [], {0x4, 0x4}, [{0x8, 0x6, r2}, {}, {0x8, 0x6, r3}, {0x8, 0x4}, {0x8, 0x4}, {}, {0x8, 0x5, r4}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x4}}, 0x64, 0x1) 05:43:48 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 05:43:48 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r0, r1) 05:43:48 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 05:43:48 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100)) 05:43:48 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:48 executing program 5: r0 = memfd_create(&(0x7f0000000080)='dev ', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 05:43:48 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 05:43:49 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:43:49 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000140)=0x1) 05:43:49 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100)) 05:43:49 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) readv(r0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/5, 0x5}], 0x1) 05:43:49 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 05:43:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000040) 05:43:49 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x80084504, &(0x7f0000000000)) 05:43:49 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:49 executing program 3: 05:43:49 executing program 5: 05:43:50 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:43:50 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:50 executing program 3: 05:43:50 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:43:50 executing program 4: 05:43:50 executing program 5: 05:43:50 executing program 4: 05:43:50 executing program 3: 05:43:50 executing program 5: 05:43:50 executing program 2: clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:50 executing program 4: 05:43:50 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) 05:43:51 executing program 2: clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:51 executing program 1: pause() gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) 05:43:51 executing program 3: 05:43:51 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8922, &(0x7f00000012c0)={'vcan0\x00'}) 05:43:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:43:51 executing program 2: clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:51 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x400000000000098, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000155, 0x63) 05:43:51 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8922, &(0x7f00000012c0)={'vcan0\x00'}) 05:43:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 05:43:51 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) 05:43:51 executing program 2: memfd_create(0x0, 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:51 executing program 4: r0 = socket$kcm(0x2, 0x1000000000000805, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0x1207c}], 0x1}, 0x0) 05:43:51 executing program 2: memfd_create(0x0, 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) [ 224.243470][ T26] audit: type=1400 audit(1552196631.454:45): avc: denied { sys_admin } for pid=8374 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 05:43:52 executing program 1: pause() gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) 05:43:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 05:43:52 executing program 4: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:52 executing program 2: memfd_create(0x0, 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:43:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000499000)=""/35, &(0x7f0000000000)=0x23) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x20) 05:43:52 executing program 4: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:52 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:52 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x201, 0x0) 05:43:52 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:52 executing program 4: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:43:52 executing program 1: pause() gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) 05:43:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x400000000000) r2 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0xfdfdffff}) 05:43:52 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:43:53 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="2400000021002553075f01650272fc02800000200010fd0033ff000c080016003c4dbd93", 0xfffffffffffffe0e) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400040, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x1}}, 0x10, &(0x7f0000000300)}, 0x4000000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x850b, 0x800, {0x9, 0x80}, {0xffffffff80000001, 0x3f}, @period={0x58, 0x7f, 0x2, 0x0, 0x3, {0x0, 0x1, 0x5ff2, 0xffffffffffffff01}, 0x3, &(0x7f0000000080)=[0x30000000000, 0x8, 0x200]}}) 05:43:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:43:53 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000001100) 05:43:53 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000001100) 05:43:53 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:43:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:43:53 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000001100) 05:43:53 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x0) 05:43:53 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r0, 0x1000000000013) 05:43:53 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:43:53 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x0) 05:43:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xfffffffffffffffe, 0x400800) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0e85667, &(0x7f0000000080)={0x0, @reserved}) 05:43:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:43:53 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='neault user:nodev '], 0x1, 0x0) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100), 0xfffffffffffffd9b, 0xfffffffffffffffe) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000240)=0x9) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000001c0)={r2, 0x3}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x145000, 0x0) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) 05:43:53 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x0) 05:43:53 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x8000, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 226.754258][ T26] audit: type=1400 audit(1552196633.964:46): avc: denied { ioctl } for pid=8512 comm="syz-executor.3" path="socket:[29459]" dev="sockfs" ino=29459 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 05:43:54 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x8000, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 05:43:54 executing program 2 (fault-call:2 fault-nth:0): memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0600000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000000000002000000", 0x38}]) 05:43:54 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:43:56 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r0, 0x1000000000013) 05:43:56 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001102) 05:43:56 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x8a, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xe}]}}}]}, 0x3c}}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x40000) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x6, 0x15, 0x8, "299c6e1e6097862cb113e1537c4490e97b9c905da4c05f580879d8a21e62c092d0fa9df84b230548626e5c5147ee525c66ea6ed5fb8ba2b0b284fb9e2265a5", 0x13}, 0x60) 05:43:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:43:56 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x8, 0x401, 0x4410000) 05:43:56 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) [ 229.677412][ T26] audit: type=1800 audit(1552196636.894:47): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16630 res=0 [ 229.678912][ T8549] netlink: 'syz-executor.3': attribute type 14 has an invalid length. 05:43:57 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x80000000112f) 05:43:57 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x2400) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x8000000003) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x14, &(0x7f00000000c0)='vboxnet1\xd8@I,%vmnet1\x00'}, 0x30) move_pages(r2, 0xa, &(0x7f0000000180)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000200)=[0x9, 0x400, 0xd226, 0x4, 0x7ff, 0xfffffffffffffffd, 0x20, 0xfffffffffffffffa], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x6) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) sendfile(r1, r3, 0x0, 0x4000000000000003) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000100)=0x6) 05:43:57 executing program 2: r0 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000180)=0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000050c0)={'vcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000007540)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="ebdd9beee309dce2fa5374dcb8c1ac6c5a2b2c8453f69f9c552f26a54e776efc3e6fd70a4ff7bf4b5aba5048e0387eb27d11a60eca9872558e34e58a537b2bc1688fc33decdfbafede7afde187ed54bcc90132d936df82e3b70d97bb46bf53580ed4d2044fb7af0256abe407858115f0f93da5fd64bb49ea4eaf985bf4a0c3c27eee05a49275c5cbe1f366d23b80cfc5f32148a1c012a6c04071efc6ff3f85c47b5e34c0119a8bdbb9d1f58d77475ee5ead209079d8bb4b8c4bcfde971eddcafa6e570effff869a3751ee2808b4e50d1af08ac378fa7c07badd8295d9a4f16a0c1e5", 0xe2}], 0x1, &(0x7f0000000380)=[{0xf0, 0x10f, 0x4, "ce7538dbaf84a81b57355503d4a633c6ac518a0521b571304b541c247127b9b2d22e54abe1603ef5ecc01ffc46d3db1910aa05bdcbeb46038e7725cd9aab52250a934018874c52c08f635dfb149009b7c53f15ffae38bc3c0c11904745fb8c1f8ba66a02eb91c69f1a6470febbc8daff039240b00c1b0bb9c4fdfc03592791a78595f8925a79ae2b569eeafa25e8e0ed281c3958876f9e7c9fecbd9ebc38cdb47fb4b855f88bc64a25de87ff7dc329422541addd7bd05dd410aa8dcacff453f3287f6361812e86a5274e06bd877c7492bb845cfedba3c03eeff93d85eb"}], 0xf0}, 0xff}, {{&(0x7f0000000480)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x1, 0x8, "6ad05e1306eb1bbc188467416e7f88b7e10cc70208321f3356f143398124f3c3dc92aeb87bfac695d1bae049758b2812e3aaadac28484d5ca7a4f32bd616fa", 0x33}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)="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", 0xfc}, {&(0x7f0000000600)="4180ecfa9719c76a1a7bd810f2fdb24195cabcf79609f923312da8cc095299243ca8b6d06ff9fea86b4d8202d165a2dd93bc9e7c136ac59355593f80c2179d04005dd8fc60f98126364fd1550094e5c4563c73df5d68a0a06a50f2c1d065f81583bcea9a9a20004aa906038712f220ba9f0160ff3b9e27969586b1a7785519dbaf", 0x81}, {&(0x7f00000006c0)="583180f6cc50a18f675cc230497e39a46adb33bb918da9103864e9db1aa2f4875ef61a4cf09ea09b5178f441a51d581f56009e7031cbf9a3bf9f201cbffa5c924de84f5cbbf7345b9b70c266c88b248b6b525328fac8cc39372a7fca030491673b4b", 0x62}, {&(0x7f0000000740)="db735d", 0x3}], 0x4, &(0x7f00000007c0)=[{0xa0, 0x117, 0x1, "2c2a63b1e99bb31d604bb1717685b20d6656a0ea179c0c1d0ebf7556cbf62cce553538f194593f21c01d829e035e0c02555060febe4d8c1a492f6b93631db17aa232e253bcb1af1869bbcf8226c117eedba3b5e724b543731bfaea314e706cf1d2a781f3249a4ce20c15f7ce54d87f7513e2576fb4c2daf37ac926c2e3d15a01788fb2f70337d30a2ac768e96491fe95"}, {0x58, 0x1, 0x0, "20f838644151fc839bcada8df410e8c31af8b885f44af662fa784430e1869f3d664eeb63143ee76a4ec17ef96afb39560cb525f60abd684593f3c04fbd7ce1a281f738"}], 0xf8}, 0xffffffffb31b6730}, {{&(0x7f00000008c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2}, 0x3}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="3918282de9c00a759f7eb7", 0xb}, {&(0x7f0000001980)="4f8b27665794a4e0fc1f43669d1557f56134cd87c1ee02abf0a0384be9f1a059300983d9cc5f079d2594d70c5686faaf9ebfb16a0c1fb994256655c9c9e5f242b20b465930f5ed14c2905551ed6614a34d382aaecc9f6828d102cef2a88e976da691189ef204abc8e22523b197536f51568ea14d53484281c7c59e720e654cb25ced098a", 0x84}, {&(0x7f0000001a40)="d82303055dfbd88c803bd5c63a390e410ac9bb5bf188c3072dc11731a8cb7d47738935343ac51ef8a17edaf633c4f5df715c2ce81e1e96cb2095", 0x3a}, {&(0x7f0000001a80)="5974a44b1ab3f9d5b3ea69c784fd03936209f375ca730042ea9838188e51ee95b4230bc4b383a6283654905de87c3a2f8605b38bea51", 0x36}, {&(0x7f0000001ac0)="5d73595ce49ee2bf1dfc7b2fb44d9133e48d6ab64a", 0x15}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="eb016b2844d02163d30214135ea335dbb6c3fc2b2edafc0f113c640eeeb77a2c2e6b7168c5800ac97f40f2", 0x2b}, {&(0x7f0000002b40)="d1e56b530ca182f1b3f34bb2bcbc8f633c343fe1bfd2e4debcba0da0288d20cf810e3c04b157be8f827c9c9c1083668daa50160e91a6c06918566e72cd37e403a86ac1c486775766ec1cfe6ee4e4e4aabfcebe19e5f6b990d1c181afdd3d795ce97759d39a0ebe92d40b5f6b0e26533ed15a7ec9598b2ed06a63a8f2c6140b82d76798578bf1e24f49cd7eb12c0ca9c821ad34bd782ef72a15ba32ac49050b097f344d3f360ac8390c24d4af7fa1a6f082524f779c2a83290c0e383751b485cc", 0xc0}, {&(0x7f0000002c00)="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", 0x1000}], 0xa, &(0x7f0000003cc0)}, 0x7}, {{&(0x7f0000003d00)=@nl=@unspec, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003d80)="0a3443537b35f8b768302027b6a78cbbe0063eb901018c97632ace1ae33eaf267c3c2c182c0cea2d801f99b4f7c15d0bc4db5d8b67667f97b41cabf028a7c0fecc9389d1ebebb759f34c2858439e0d61c831d711d37d2b3eba5484a497753506e43498e0", 0x64}], 0x1, &(0x7f0000003e40)=[{0xa0, 0x10d, 0xffff, "cbee32000e534e8c44c6e75b3814d3232ebfc8065219907be3cff7ce4a49ce64ca80b65c59deb1f287d3c8dfeaa8c1caa94e2f1b8976660244326d96d667285bf54bee2dcbdcdbb863b6b1f6965e4aa569a16017f1fc13f78b742b99a01ed074e57fe0a32bb45003dbbc117a7cf1159de56ec5153de6dda73b2f8d90a1040b90d4440629f2e9f67bb687ebdd94fd1cf1"}, {0x78, 0x11f, 0x8, "5ed34afa7f4b8ef008e8d2ad74927595a457ba9f0f31370e7e04fef101812a529f59a0b41a08830654c95eac762634b78bf4e2ac2aadbee6472f9adadbb90b303b7ceea95819071b7684d1ac3c0a64447e7c493b0d739ce33b43a7fe16a1762a6db2d617"}, {0x1010, 0x103, 0xfffffffffffffe00, "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"}, {0x28, 0x29, 0x3, "c2886fcf48dd6b828769064e03277a50aa07bd5930"}, {0xf0, 0x10f, 0x9, "7e4be54cdf3683dc02125f23ce866dde3f0578ef68102af0279299f94bf05cfcbb8ea7775ce37320072e940c236538c8917e4155aad080e7b0b504e6f6a36b94f0e8e938fb5461cf6d015d445c8c42b5e195d34f7fd427d94ac724541c2434579e430dac3ed95192e09e536a8b50f12395665a48894f66404b45c69cb8b1def642ed4cbb2cdc7b5c357630feea8c0440850a29a5dc88361d0c15db20fc9d69a7c09861e99a7d29b38c206d55ef6f4e1bb3323615c12e4f9c1c855f874af14630a86a576532a5ca05b521998156ebc13d330df5b6a01b1f6e5eb97f1cf3"}, {0x28, 0x111, 0x5, "fcee4dcfa2c83edd5d2e1eed5931da73c5967d484598"}], 0x1268}, 0xbb}, {{&(0x7f0000005100)=@xdp={0x2c, 0x3, r1, 0x33}, 0x80, &(0x7f00000074c0)=[{&(0x7f0000005180)="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", 0x1000}, {&(0x7f0000006180)="b6eceb8d31d1f84b0a7616da2a9f1e04800cc89ccbc9abb27258a3d45ae4a5439d046daaf9d0d9b202c192ad5051d7cf0199bd28737c99a35f85ea647b3268d42789afe5440030435c9a5d3c4ea40af2a6c6f89fae8f0615bcf104f1558349d4d97cb44c5fa806fc5da0e5d58470cb6b92e7c4f8d3b841ada0f4f5cd6ddd833b0e9235dafa495a53f9fe1a5791d62668e84ad1af62e9684ed303f2daade4ebaea381c69775ad29bfc5ab7e05000e53f0da3d489946e50412c90c61e28b3d28a647c7854fd8cd514ab25b9851751c214bf92f54a1c8c43e441b0923c62a3936ad7d5b4b61caa0", 0xe6}, {&(0x7f0000006280)}, {&(0x7f00000062c0)="debb0cfeb6cbae531b99785650c3dfa227296b3b3fe186bbcfbb6ae3fef254ff594c0ad09156d7d549e3ead83087c7bc73b6382fd90b727c0de39a46ba5c3b286b18480fef86e8479789bc8973cb4620250d97d9a89dc078d581786647c838fb004ccfd4c63d4782af4d8ed8647761dfa6c1e3294cd4fd9d392d3295a9dd97732949e8f3e3802f02511d63f00eb3ac", 0x8f}, {&(0x7f0000006380)="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", 0x1000}, {&(0x7f0000007380)="e99b3921f1500015820f77061a1084b0469abf2b16e9b148485b1135f5d6e7f938508f5ecb3dfdeca97415e9a048bc411b8800fcacc175aa266216df4dd63f5123689a30161478267de05d302e814288f638e83242365942e5960b7e2768ce313b89f52c68c72ac5888269f69b267ddd8aad974e529a477a21fe6d1bb39ef761a2d72ef1a9e378a2c8780e80d4971fb01f32048ec84a7aa9d586761c3acace201fe8af93293e8c42511673a2967e752a7e16", 0xb2}, {&(0x7f0000007440)="841020ff937d8dee50e67e25ee1df7d9e2f9da91e0c2f5f2fc4cd761986aeafb65e611c47f396520f5f56e22fc862dc1ea3f921d93bbba916c35557ed5a1a38222a353", 0x43}], 0x7}, 0x81}], 0x5, 0x4001) r2 = socket(0x4, 0x5, 0x450d26ec) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) memfd_create(&(0x7f0000000000)='\x00l\xd4\xecS', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) [ 229.855087][ T8549] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 229.886733][ T8564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=8564 comm=syz-executor.5 05:43:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x6f, "ece3a8bd1bc6d841f2550384d53e12e63d85e6105cf4a7cb866b0a34f5fc6c81d05dd893b4824fee53c6533003e3432ad8651070f1c29dc66544510c72c556a7a94519ccca9434709d7afc230ccbde3d79839ed3753a437e3fe3e52a02b8f04d3df17ae839fcb8138c1d545b9a281d"}, &(0x7f0000000140)=0x77) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x3f, 0x101, 0x4, 0x4, 0x100000000, 0xa8b, 0x101, 0x2, r3}, 0x20) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x2, 0x400000, 0xffd4) [ 229.954118][ T8572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=8572 comm=syz-executor.5 05:43:57 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000000)="01a486e755d4dac02f27b2f019210e02d942ddcea1c64c982a1ae3da5b72aa64b150665b52262a22203a7439557a57943c6f1dd1b3d7995697d2e20d92fd22", 0x3f, 0x4, 0x0, 0x3, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x31c813301cace89f, 0x2, r0, &(0x7f0000000540)="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", 0x1000, 0x7, 0x0, 0x0, r2}]) 05:43:57 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x200) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x1000, @loopback, 0x8a}, {0xa, 0x4e21, 0xffffffffffffffd6, @mcast2, 0x10}, 0x100000000, [0x0, 0x0, 0x2, 0x101, 0x2, 0x5, 0xfffffffffffffffa, 0x8001]}, 0x5c) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800) 05:43:59 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r0, 0x1000000000013) 05:43:59 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfffffffffffffffe, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0x80845663, 0x0) 05:43:59 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0xffffffffffffffe0, 0x4) 05:43:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) 05:43:59 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:43:59 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:43:59 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = shmget(0x0, 0x2000, 0x33aaa4139557f4cf, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sched_rr_get_interval(r0, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4003d63a, 0x200400) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r0) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:00 executing program 2: memfd_create(&(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400001, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x310, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xfff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r2 = getpgrp(0x0) getpriority(0x3, r2) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000240)="f570dfd44463366acbae713165bae45a0491c69f40244c2d7b5d6cf4c5e318e18a3945238b46aef544e6de72775b286861284d4274013646dc6f8d2c4305cb8100346503df3b8ab68c6075f52544c35b04527c312574778db39d28dd49348f339dce085be877bc0654c38f124f442859ae34bc1eb937a7104d9b90608fde5eb341664738e7014fcf90eb129afe77c478385838d2c4d8ebe9c3509fbcf715ab73e9a06a24092a6ecb6332cae0a94314d3027983fd1bbd37d5705ad033e54d79fde5", 0xc1) 05:44:00 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000080)={@local}, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) getresuid(0x0, 0x0, 0x0) geteuid() setresuid(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}, 0x30) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'nlmon0\x00', 0x2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfcffffff]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:00 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10001, 0x2800) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') creat(&(0x7f0000000080)='./file0\x00', 0x1) sendfile(r2, r3, &(0x7f00000000c0)=0x209, 0x5a) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000180)={0x7, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) 05:44:00 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000080)={@local}, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) getresuid(0x0, 0x0, 0x0) geteuid() setresuid(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}, 0x30) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'nlmon0\x00', 0x2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfcffffff]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:00 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read(r0, &(0x7f0000000000)=""/11, 0xb) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) flock(r0, 0x0) 05:44:03 executing program 1: pause() r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:03 executing program 2: memfd_create(&(0x7f00000001c0)='$wlan0lo.\x00', 0x4) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x3, 0x6}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:03 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000080)={@local}, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) getresuid(0x0, 0x0, 0x0) geteuid() setresuid(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}, 0x30) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'nlmon0\x00', 0x2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfcffffff]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:03 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) 05:44:03 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:03 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x240000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) 05:44:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) 05:44:03 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x34, 0x2, @thr={&(0x7f0000000180)="66cf052c0bcacbe81c49559ebe68beb8df0299dd85db08eadeaeaa832c7855d8e29ac913739fc24d43584ed54262fb6650dbddb749f8daebec133aca11c24452acd1ad5f7f010eaf6d4dfb0dc79ece6147514a95bed54056ce1f56ce83a98a6f6eafd0ac9665b4008a6cb247de03cc32ed39e033a5fcf30fc220c380969fbb2c0b4552d64ef8d95119ee85401391a1fa2cc6c5f3769ae4032bf6832f8fd8ca58547fec6eb652a9bc21b539d8cae68a4c1a6c3a84aca287120f92a8b24a37f18a6ac0a9a736e315feb5019d6c889ad526e774c120ded0bf0d927a1d6bf24a7d20cc9d8bc9859559e1a7e184771025f2190ff384a3", &(0x7f0000000000)="998c9f4145ab"}}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000002c0)={{r1, r2+10000000}, {r3, r4+30000000}}, &(0x7f0000000300)) clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:44:03 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:03 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) [ 237.889179][ T7] attempt to access beyond end of device [ 237.895090][ T7] loop5: rw=1048577, want=29225, limit=112 [ 237.903895][ T7] attempt to access beyond end of device [ 237.909584][ T7] loop5: rw=1048577, want=31273, limit=112 [ 237.919860][ T7] attempt to access beyond end of device [ 237.925546][ T7] loop5: rw=1048577, want=33321, limit=112 [ 237.933795][ T7] attempt to access beyond end of device [ 237.939513][ T7] loop5: rw=1048577, want=35369, limit=112 [ 237.949812][ T7] attempt to access beyond end of device [ 237.955529][ T7] loop5: rw=1048577, want=37425, limit=112 [ 237.964657][ T7] attempt to access beyond end of device [ 237.970377][ T7] loop5: rw=1048577, want=40529, limit=112 [ 237.984439][ T7] attempt to access beyond end of device [ 237.990193][ T7] loop5: rw=1048577, want=44617, limit=112 [ 238.000963][ T7] attempt to access beyond end of device [ 238.006671][ T7] loop5: rw=1048577, want=48465, limit=112 [ 238.017818][ T7] attempt to access beyond end of device [ 238.023467][ T7] loop5: rw=1048577, want=52561, limit=112 [ 238.031842][ T7] attempt to access beyond end of device [ 238.037599][ T7] loop5: rw=1, want=53377, limit=112 05:44:06 executing program 1: pause() r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:06 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0xc2004, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000080)={[0x2, 0x2000, 0x0, 0x110000], 0x40, 0x10, 0x7f}) 05:44:06 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:06 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:06 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0xfffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:06 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) 05:44:06 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x18800120, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:06 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:06 executing program 0: r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:09 executing program 1: pause() r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:09 executing program 0: r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:09 executing program 2: clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:09 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:09 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x10006000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:09 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:09 executing program 0: r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:09 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:12 executing program 1: pause() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 05:44:12 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:12 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:12 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={r1, 0x8e45, 0x100000000, 0x5, 0x3, 0x1, 0x3}) 05:44:12 executing program 2: memfd_create(0xfffffffffffffffe, 0x4000) clone(0x1ffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:12 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2020c1, 0x40) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) open_by_handle_at(r0, &(0x7f0000000080)={0x91, 0x2, "bf605b0bbb4228711a9639c7bfd3f9f66cfbb2552277ae7dc321719920ca73c31d58c21118a3efc0a8531050fd6e5303c4cf8f53024735b1b37dc4ebd8dc859694005cbd7d6308bc483057a68efd455e10edf1efcd2f0da2db3bb16098965fd7086dac6d7ae8d82e9d1f3a4a80afd283b57f86207fd51430a0e009d094e86beaeecf80b6a9a28ab572"}, 0x400) 05:44:12 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) 05:44:12 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:12 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x400000) r1 = gettid() write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0xffffffffffffffff, 0x8, {{0xffffffffffff5834, 0x100, 0x0, r1}}}, 0x28) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000000c0)={0x7fffffff, 0x2, 0x0, [{0x80000001, 0x6, 0x2, 0x7fff, 0x1, 0x100000001, 0xc6d8}, {0x1ff, 0x6, 0xbca, 0x46e5, 0xae6b, 0xbf}]}) 05:44:13 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) write$eventfd(r1, &(0x7f0000000000)=0x3ff, 0x8) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:13 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:13 executing program 1: pause() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 05:44:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:13 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:13 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1400) 05:44:13 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000000c0)={0x7fffffff, 0x2, 0x0, [{0x80000001, 0x6, 0x2, 0x7fff, 0x1, 0x100000001, 0xc6d8}, {0x1ff, 0x6, 0xbca, 0x46e5, 0xae6b, 0xbf}]}) 05:44:14 executing program 1: pause() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 05:44:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)={0x4, 0xf, 0x4, 0x8000e000, {r3, r4/1000+10000}, {0x4, 0x8, 0x1ff, 0x100, 0x8c0000000000000, 0x2d, "a616b71c"}, 0x6, 0x3, @userptr=0x20, 0x4}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:14 executing program 2: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfb9, 0x284200) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000180)) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0x7, 0x2, {0x57, 0x1, 0x0, {0x1, 0xfffffffffffffd66}, {0x5}, @rumble={0x9, 0x6}}, {0x55, 0xcc8, 0x0, {0x9}, {0x5, 0xfffffffffffffffa}, @cond=[{0x4, 0x4, 0x5, 0x9, 0x2, 0x1ffe0000000000}, {0x3, 0x7f, 0x3, 0xa9, 0x1, 0x8}]}}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0, r0}) 05:44:14 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:14 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x844000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x15, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0xfffffffffffff7ef, 0x7, 0x3, 0x1000, 0x0, 0x7, 0x4}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x40000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1600}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}], [{@euid_lt={'euid<', r4}}]}}) 05:44:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x2, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:15 executing program 1: pause() r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:15 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:15 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) fchdir(r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:15 executing program 2: memfd_create(&(0x7f00000001c0)='\x00', 0x2002) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 05:44:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:15 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x14, 0x0, 0x0, @multicast1}}}}}, 0x0) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:15 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:16 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:16 executing program 2: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x4000) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1fe, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x8) execveat(r1, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x200000000001800) 05:44:18 executing program 1: pause() r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x292000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x800) 05:44:18 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:18 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'bridge_slave_1\x00'}}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:18 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setuid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(&(0x7f0000000580)='./file0\x00', 0x20) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000006c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000100220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000640)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x5, [0x8000, 0xfffffffffffffffe, 0x0, 0x3, 0x5]}, 0xe) io_setup(0x69, &(0x7f00000001c0)=0x0) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffb, r1, &(0x7f0000000400)="16a8f65b19bdda81d42528230e5d0e336f4cdb088a61961da1ca63f5a87e8d8e73f1002ca673cfc89f28a7b0bf34d48377aca14065100376bfc5996eff3ecb80b6ed72ed81d58fa14d8ab4a23572ac6bf67c9937084be441514687947ebcbebcd059160908ad497416d9a3313dae1e3c19ba78b6ff07ca0a53589e59619688521eb8131eb06f418c967c17e45851e81bd61ae5835275e47b32c1f1443f4fd7a5c1e6b78bf594d794e0e7308393572dc7294ca1482333d6870a7b0f053ab571a711b1b698ab225d5a3c9c3c43b85e1541c37816bcdc82b8807208734b6698d980d61906302a09e2b261e567b9cd54189a61", 0xf1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000280)) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:44:18 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) 05:44:19 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setuid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:19 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xfff, 0xd9, [], &(0x7f0000000100)=0xc28c}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x5, 0x1, 0x4, 0x8008e000, {0x77359400}, {0x4, 0xc, 0x6fe025ff, 0xffffffffffffffff, 0x3, 0x9, "be87be18"}, 0x9, 0x1, @fd=r0, 0x4}) 05:44:19 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) fchdir(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:21 executing program 1: pause() r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:21 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x1000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000280)=r0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10000, 0x0) setsockopt$inet6_dccp_int(r4, 0x21, 0xf, &(0x7f00000001c0), 0x4) kcmp(r1, r2, 0x6, r0, r0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'tunl0\x00', 0x1000}) 05:44:21 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:21 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) fchdir(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setuid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setuid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:21 executing program 2: memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'ifb0\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000001600)={&(0x7f0000000300)={0x2c, 0x4, r1, 0x6}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000340)="df5e3c2d7a36902ed7a116b5b20f88e09a7ff29df8d306282cb4b94cc4030696c702ae159932026d6e6c8dd253e2a0a565e665d41a1947b0ee7b5f9c629fe8ff8afb813b76355aa0c51161e3c27589d9f720527e0b7fe041499c4bd531260564d58e97baa8a7fd1d590dee09ba92ab5324ffa385d96cfe53efafb221f9d099fc61984cbe31b96a9ebbe717555cdcc2216bad0b60e3148a376bcefc96bf881818a52f426ac57b18b6c9e0dbfb0c0d951e1e44cca571563ae83b5902", 0xbb}, {&(0x7f0000000400)="28f224a352525365ead761510764bcdcbf6bf985de5eea669b29910b117bc0debc4ba130801d6d9a33d6a41d30b654d984d8110c4c9d2c2fbb68525b1dcacf83c3bd056cd286cf14c4a6f00b9eca685f", 0x50}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="aa7ce63ee0ccffff4489c9c97c1f4865232595e29cdf1eb45e5f81b8548f1e9973caf06d1b8849d3f7aec3ab7c20c399a286754bf731019c5676f40b6dd1010ca50e3155d2194e6c78a2d0f1d072827d307f5d6b6e429df3c49871130d6f75750ad53d0bfd07e26100fe", 0x6a}, {&(0x7f0000001500)="53f8ed06ddeb046a0599c916735e56db38bb80799380b4c8515661ffbd65e1e2a5351182bca52fb74c349a65831cf5aa82aaab4a46ece3db8660b7c41cf5ffa48b", 0x41}], 0x5, 0x0, 0x0, 0x20000800}, 0x800) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8040, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@null=' \x00', 0x4, 'nlmon0\x00'}) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:22 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:22 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000400)={0x10}) fchdir(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setuid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:22 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:22 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x4, 0x401, 0x40, 0xbdb}) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x200, 0x0, [], {0x0, @bt={0xfffffffffffffff8, 0x4, 0x1, 0x1, 0x4000000000000000, 0x7, 0xeb9, 0x2, 0x4f09, 0x9, 0x7, 0x3, 0x7, 0x7f, 0xc, 0x1}}}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:24 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:25 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:25 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x400, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/40) clone(0x10000000004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpeername(r1, &(0x7f0000000280)=@in={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x80) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) socketpair(0x7833b239acd19ef9, 0x20000000000005, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000026c0)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000027c0)=0xe8) lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000028c0)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x5, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x73, r4, r5}, {0x9, 0x24, 0x7fff, 0x6, 0x1, 0x200, 0x7, 0x8000}, {0x49, 0x0, 0xf5e6, 0x15}, 0x3f, 0x6e6bb8, 0x2, 0x1, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3502, 0x4, 0x3, 0x7, 0x1ff, 0x8, 0x9}}, 0xe8) execveat(r1, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x800000001100) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000380), 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r6 = shmget(0x2, 0x1000, 0x410, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000180)=""/241) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) pipe(&(0x7f0000000140)) 05:44:25 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setuid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:25 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7b0000001705000d002e2f66696c65302f66696c373a84db647a1b5014b6cc3f64e677a7be7279dbd860fecfc9e084cd9e3bf5db8f74ad29482fd5e38c12d64e147f79c4e5995ee9bae04d94ad4f1d61a7b573152e28f2c1e94244408a2282ef42e4a4e90f181ada66c5e96d7a4d0b7b2b59ccf03754e6e2bfc3afb567a169420c7147da390d620834f5e44cdbc004968a5561bd25fcb1afb1b753e012d5dc4b92462213323281193dcd05b2d4b603000000a5c302767cfa3b2b670087658c3a0c0bdf65"], 0xc4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:25 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:25 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:27 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:27 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000400)}, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:28 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x20000000004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="000500000000050000000000000000000000000000000000"]) 05:44:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:28 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:44:28 executing program 5: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:28 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa000, 0x0) execveat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:28 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0x3}}, 0x20) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180)={0x0, 0x8}, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80, @loopback, 0x4}, r1}}, 0x30) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:30 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:31 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:31 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x101) execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1400) 05:44:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:31 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) pwrite64(r0, &(0x7f0000000080)="da30e70b5cef4a4db4d8e912fab78d23e43265ca63ecfe35c54f7bb2e15edb8bf5d01cbdaa7ae120c2da3a377703e245e1c34c151a4bdc45c263ba1e7dae2e4a3d4dedc17ec108591d54116475cc06ddd8385bb548a7f12c868361d338e9b7223e87660d89c3800996e1f8458cffe04d3d7984c907b93b457a55e7a1ee4393fd480c3f744dd5f00ec795", 0x8a, 0x3d) 05:44:31 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:31 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x48000, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYBLOB='upperdir=./file0,nfs_export=ofF,upperdir=./file0,nfs_export=on,rootcontext=root,subj_type=\x00,\x00']) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) accept4$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e, 0x800) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000380)={0x4, 0x7}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) write$FUSE_POLL(r2, &(0x7f0000000340)={0x18, 0x0, 0x7, {0x7fffffff}}, 0x18) 05:44:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:33 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:34 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:34 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:34 executing program 2: memfd_create(&(0x7f0000000040)='\x00\xd4_\xa2t._\b\xb2\x06', 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0xa0fe1c9b2355a968, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) seccomp(0x1, 0x1, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x1, 0x1, 0x100, 0x1000}, {0x9, 0x7, 0x0, 0x2}, {0x1, 0x6a, 0xd1, 0xffffffffffff0001}, {0x800, 0x9, 0x5, 0x33}, {0x2, 0x9, 0x6, 0x2}, {0x200, 0x4, 0x9, 0x1}, {0x3f, 0xeb, 0xb3, 0x5c1}, {0x401, 0x7, 0x0, 0x10001}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2040, 0x0) connect$rose(r0, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) execveat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x800000001100) 05:44:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:34 executing program 3: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa000, 0x0) execveat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:34 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:34 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xba89, 0x200002) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000000c0)={0x0, r1}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) 05:44:34 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x3) setsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f00000000c0)="58138ef44a17ca938df819f898f92fa671a01046b515329312e4535762c21a", 0x1f) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$input_event(r0, &(0x7f0000000000)={{}, 0x3, 0x3, 0x8}, 0x18) sendto(r1, &(0x7f00000002c0)="36cb0b721a12f4aa6b0a7ba6ed0ff1ccd1b06b1fed2258640fa1c8b4e2af9fe92340dca9d231788d69340812da696a64b6a09fdf5361f173f74db8810d2d0d202cc7053b6414a8b8dc436d85cbeca7dd78b18e5dd313abd9a50341806e4bc5963780", 0x62, 0x80, &(0x7f0000000200)=@sco={0x1f, {0x7, 0x1000, 0x100000000, 0x5, 0x6, 0xfc}}, 0x80) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) [ 267.252493][ T26] audit: type=1400 audit(1552196674.464:48): avc: denied { create } for pid=9242 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 05:44:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 267.324876][ T26] audit: type=1400 audit(1552196674.474:49): avc: denied { setattr } for pid=9242 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=31686 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 05:44:36 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x94) 05:44:37 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:37 executing program 2: r0 = memfd_create(&(0x7f0000000040), 0xfffffdfffffffffc) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x80, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x7, 0x10000) execveat(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x800000001000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpeername(r3, &(0x7f0000000100)=@un=@abs, &(0x7f0000000080)=0x80) r4 = fcntl$dupfd(r0, 0x2, r3) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000000)={0x1ff, "005b4a2ce17bc47690e0fac5832047c06c73d8eb7464c7cf889aef468cef5480", 0x0, 0x1e30, 0xff, 0x1, 0x2, 0x4, 0x4, 0x7}) accept4$packet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x14, 0x800) 05:44:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x94) 05:44:37 executing program 2: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x94) 05:44:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x94) 05:44:37 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x2) clone(0xfffffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x401, 0x89) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000180)="afff9912cebdafb0cd9337f867d5c6413b7e0f10304ec4547fef5f67502bc9f4f99dd08b53d3685d4d3a83", 0x2b) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x1000}}, 0x18) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) execveat(r2, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x8000000010fe) 05:44:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:39 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:40 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:40 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x0, 0x1ff, 0x8, 0x5, 0x259, 0x80000000, 0x1}, 0x1c) 05:44:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:40 executing program 3: mkdir(&(0x7f0000000a40)='./file0\x00', 0x4) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000880)='security.SMACK64EXEC\x00', &(0x7f00000008c0)='syz1\x00', 0x5, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200), 0x18a) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(0xffffffffffffffff, 0x208200) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000b40)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0xfffffffffffffffd}, 'syz0\x00', 0x1e}) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fchdir(r0) mknod$loop(&(0x7f00000003c0)='./bus\x00', 0x2400, 0xffffffffffffffff) 05:44:40 executing program 2: clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) [ 273.310181][ T9310] input: syz1 as /devices/virtual/input/input5 05:44:40 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:40 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 273.440253][ T9336] FAULT_INJECTION: forcing a failure. [ 273.440253][ T9336] name failslab, interval 1, probability 0, space 0, times 1 [ 273.467526][ T9336] CPU: 1 PID: 9336 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 273.475094][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.485145][ T9336] Call Trace: [ 273.488572][ T9336] dump_stack+0x172/0x1f0 [ 273.492986][ T9336] should_fail.cold+0xa/0x15 [ 273.497598][ T9336] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 273.503965][ T9336] ? ___might_sleep+0x163/0x280 [ 273.508859][ T9336] __should_failslab+0x121/0x190 [ 273.513888][ T9336] should_failslab+0x9/0x14 [ 273.518437][ T9336] kmem_cache_alloc+0x2b2/0x6f0 [ 273.523348][ T9336] ? wait_for_completion+0x440/0x440 [ 273.528685][ T9336] getname_flags+0xd6/0x5b0 [ 273.533201][ T9336] user_path_at_empty+0x2f/0x50 [ 273.538102][ T9336] do_fchmodat+0x9c/0x150 [ 273.542458][ T9336] ? __ia32_sys_fchmod+0x80/0x80 [ 273.547442][ T9336] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 273.552914][ T9336] ? do_syscall_64+0x26/0x610 [ 273.557637][ T9336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.563735][ T9336] ? do_syscall_64+0x26/0x610 [ 273.568455][ T9336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 273.573796][ T9336] __x64_sys_chmod+0x5c/0x80 [ 273.578395][ T9336] do_syscall_64+0x103/0x610 [ 273.582998][ T9336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.588896][ T9336] RIP: 0033:0x457f29 [ 273.592809][ T9336] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.612417][ T9336] RSP: 002b:00007f48a8c06c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 273.620829][ T9336] RAX: ffffffffffffffda RBX: 00007f48a8c06c90 RCX: 0000000000457f29 [ 273.628818][ T9336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 273.636787][ T9336] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 273.644759][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48a8c076d4 [ 273.652736][ T9336] R13: 00000000004bda9b R14: 00000000004ce920 R15: 0000000000000004 [ 273.667593][ T9310] input: syz1 as /devices/virtual/input/input6 05:44:41 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x800000001101) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffffffffffff4c4d, 0x400040) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000000c0)={0x1, 0x40}) 05:44:42 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 05:44:42 executing program 3: mkdir(&(0x7f0000000a40)='./file0\x00', 0x4) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000880)='security.SMACK64EXEC\x00', &(0x7f00000008c0)='syz1\x00', 0x5, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200), 0x18a) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(0xffffffffffffffff, 0x208200) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000b40)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0xfffffffffffffffd}, 'syz0\x00', 0x1e}) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fchdir(r0) mknod$loop(&(0x7f00000003c0)='./bus\x00', 0x2400, 0xffffffffffffffff) 05:44:42 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:42 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:42 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x8021, 0x3}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x45e4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x8000000000}, 0x8) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:42 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) [ 275.247525][ T9350] FAULT_INJECTION: forcing a failure. [ 275.247525][ T9350] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 275.260779][ T9350] CPU: 1 PID: 9350 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 275.268330][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.278393][ T9350] Call Trace: [ 275.281709][ T9350] dump_stack+0x172/0x1f0 [ 275.286061][ T9350] should_fail.cold+0xa/0x15 [ 275.290678][ T9350] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 275.296592][ T9350] ? debug_smp_processor_id+0x3c/0x280 [ 275.302068][ T9350] ? perf_trace_lock+0xeb/0x510 [ 275.306990][ T9350] should_fail_alloc_page+0x50/0x60 [ 275.312241][ T9350] __alloc_pages_nodemask+0x1a1/0x7e0 [ 275.312273][ T9350] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 275.312285][ T9350] ? find_held_lock+0x35/0x130 [ 275.312309][ T9350] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 275.312329][ T9350] cache_grow_begin+0x9c/0x860 [ 275.338845][ T9350] ? getname_flags+0xd6/0x5b0 [ 275.344996][ T9350] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 275.345020][ T9350] kmem_cache_alloc+0x62d/0x6f0 [ 275.345044][ T9350] getname_flags+0xd6/0x5b0 [ 275.345064][ T9350] user_path_at_empty+0x2f/0x50 [ 275.345084][ T9350] do_fchmodat+0x9c/0x150 [ 275.369803][ T9350] ? __ia32_sys_fchmod+0x80/0x80 [ 275.375045][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 275.380518][ T9350] ? do_syscall_64+0x26/0x610 [ 275.385204][ T9350] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.391275][ T9350] ? do_syscall_64+0x26/0x610 [ 275.395976][ T9350] ? lockdep_hardirqs_on+0x418/0x5d0 [ 275.401274][ T9350] __x64_sys_chmod+0x5c/0x80 [ 275.405883][ T9350] do_syscall_64+0x103/0x610 [ 275.410491][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.416411][ T9350] RIP: 0033:0x457f29 [ 275.420310][ T9350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.439942][ T9350] RSP: 002b:00007f48a8c06c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 275.448358][ T9350] RAX: ffffffffffffffda RBX: 00007f48a8c06c90 RCX: 0000000000457f29 [ 275.456354][ T9350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 275.464343][ T9350] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.472315][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48a8c076d4 [ 275.480286][ T9350] R13: 00000000004bda9b R14: 00000000004ce920 R15: 0000000000000004 05:44:42 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r2, 0x3}) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:42 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:42 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xd39a, 0x2, 0x800, 0x1}) 05:44:42 executing program 3: mkdir(&(0x7f0000000a40)='./file0\x00', 0x4) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000880)='security.SMACK64EXEC\x00', &(0x7f00000008c0)='syz1\x00', 0x5, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200), 0x18a) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(0xffffffffffffffff, 0x208200) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000b40)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0xfffffffffffffffd}, 'syz0\x00', 0x1e}) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fchdir(r0) mknod$loop(&(0x7f00000003c0)='./bus\x00', 0x2400, 0xffffffffffffffff) 05:44:45 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 05:44:45 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:45 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:45 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1000000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x3, 0xb50, 0x6, 0x7df, 0x1000, 0x1}) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x8000000010fd) 05:44:45 executing program 3: mkdir(&(0x7f0000000a40)='./file0\x00', 0x4) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000880)='security.SMACK64EXEC\x00', &(0x7f00000008c0)='syz1\x00', 0x5, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200), 0x18a) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(0xffffffffffffffff, 0x208200) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000b40)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0xfffffffffffffffd}, 'syz0\x00', 0x1e}) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fchdir(r0) mknod$loop(&(0x7f00000003c0)='./bus\x00', 0x2400, 0xffffffffffffffff) 05:44:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:45 executing program 2: r0 = socket$inet(0x2, 0x0, 0x800) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e20, @empty}}) memfd_create(&(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x1e8GP\n\x0eg/Z>\ff\x93u\x80\x19\x00\xfc\xebQ\xe4i\xc41\xa1*\xf4g\x01@G\x84\x1c#\x80o\x0f\xf0$\xa1e)\xcaa\x1a\x83A\xea\x8bt\xdd\x0e\xd4\xbf\x95\xf9\x8a\xb2\x03\xb7f\xf0^\xca\x80\xf3\xdf5\x84\x10\xa2\x832\x9bs\xa7\xba\b\xcf\xdb\xa00\x13Y5.?_\x16`\xe9\r.\xa0\xd7\x1b\xe2\xb5px\xd5\xdc\x9a\xd3\xd5\xc9c\x8a2F\xf1o3\xde\xafXD\xa9\x19\xb4\xf9\xd5v\x80`Z7E\xb7O:\xfd\xeb~\x7f\xfb\xa5K\xc4>C>t;\x80\xdc\x97', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x10000}, 0x1) 05:44:45 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x2) 05:44:45 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="401e443525adf33c21b521b44442ac41c84388359f9129ff67e269a8e5497041f650ca3dc88a534be03417395215f6c655e4672761f0c7763b8d03e5b5553bf66e371b857de44322e1c81532514ceb847e51ecdf238d1fb8fb22b684c8e4df5ceda6c42d31ebe0cfa9e8761383ace705ba839d78158962c77f6d300c9dbb", 0x7e, 0xfffffffffffffff8) request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', r0) 05:44:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:48 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 05:44:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:48 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:44:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x30) 05:44:48 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/71, 0x47) 05:44:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x408) 05:44:48 executing program 2: memfd_create(&(0x7f0000000040)='IPVS\x00', 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x90003, 0xa245fb31d06b637c) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x2, 0x612860f8, 0x3ff}) clone(0x48020003102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000c}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0009015544151f193593d9ef56e346c1261ea930944bf7bfc3dc1ab41d059cedc54853f3e2720615793d793f199a90dfcd6fa3f2fb94c401e3f74c72dc5273c7c4957bf17eb6e3d07af1b75166448e4b0cea2e47801eacdbe9fcecba1dcdb3e7deada27fe08f708c0619cf139baa84253cd266cc71a15792bcde038f0834e3ae6388fee56bde17a62dbcdf23e495aa3f1358af1229db7e691b7dfbf94dbe1cb6bfec223583337a7c234e7bf7b85fb0e12cb2da3e343d7410a3bf2890708851dd6d8430d696e91863bea17221e84acfd09bcfc57388c448de4307970edc8590172b3d4523", @ANYRES16=r3, @ANYBLOB="000426bd7000ffdb6f53a31ac640eb2e221111df25020000000800060009000000f17fd58ef6c00c3565a9ab74a522566af646e01d0913ffc93cfe57"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 05:44:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x804) 05:44:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x408) 05:44:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:49 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8000000001087fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:51 executing program 1: pause() gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 05:44:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:51 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x4, 0x3, @stop_pts=0x4}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) readlinkat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/224, 0xe0) 05:44:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3000) 05:44:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:51 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:44:51 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='selinux:cgroup[self:vmnet1\x00', &(0x7f00000000c0)='cpusetcpuset}#wlan1.cgroupselinux\'\x00', &(0x7f0000000100)='system\x00'], &(0x7f00000003c0)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\xd1cpusetppp1cgrouplo.\'@}:\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00'], 0x1000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x20, 0x101040) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000440)=0xc0, 0x4) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) iopl(0x51) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3f00) 05:44:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x1000000) 05:44:52 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x18400, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:52 executing program 1: pause() gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 05:44:52 executing program 2: memfd_create(&(0x7f0000000080)='\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x40000) getdents(r0, &(0x7f0000000180)=""/146, 0x92) execveat(r0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x800000001100) 05:44:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x2000000) 05:44:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r2, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:52 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:44:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x8040000) 05:44:52 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="76a8220c94f2a384b6"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x30000000) 05:44:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r2, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) epoll_create1(0x80000) sendto(r1, &(0x7f0000000040)="00e2d1ae75689bb22ea6e9244d09000000fecb051ee636f3765e7c089f4ae292", 0x20, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0) setsockopt(r0, 0x80000000, 0x80, &(0x7f0000000080)="4165e65efd55a0dd11c0568bd92f6624bc6aac1035b2c968dc54f26b1cf79a8b87012e542597d81bd4757698d51e04426de8b96af12fbc21fc996b97f0446225029eb302cfb10bf940f73acf22400dd1cb52925580dec070ef83e978b0e8c5e94a56aa5f3ecf45c07542317a9d1398df023828505ff1145f8e06ba475885caebc15718d763c3cbe13e3c2e2a354792f625f893657a82f87f10991165dfefb3", 0x9f) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x400, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 05:44:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3f000000) 05:44:53 executing program 1: pause() gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 05:44:53 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x8cffffff) 05:44:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r2, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:53 executing program 3: readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') pread64(r0, 0x0, 0xfffffffffffffd83, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0xf0ff7f00000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r3, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000340)) 05:44:53 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) [ 286.310856][ T9592] FAULT_INJECTION: forcing a failure. [ 286.310856][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 286.332696][ T9593] IPVS: ftp: loaded support on port[0] = 21 05:44:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xebffffff) [ 286.396360][ T9592] CPU: 0 PID: 9592 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 286.403964][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.404024][ T9592] Call Trace: [ 286.404068][ T9592] dump_stack+0x172/0x1f0 [ 286.421830][ T9592] should_fail.cold+0xa/0x15 [ 286.426424][ T9592] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 286.426448][ T9592] ? ___might_sleep+0x163/0x280 [ 286.426469][ T9592] __should_failslab+0x121/0x190 [ 286.426489][ T9592] should_failslab+0x9/0x14 [ 286.426507][ T9592] kmem_cache_alloc_trace+0x2d1/0x760 [ 286.426597][ T9592] snd_pcm_oss_change_params_locked+0x1a7/0x3750 [ 286.426622][ T9592] ? __mutex_lock+0x3cd/0x1310 [ 286.437253][ T9592] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 286.437270][ T9592] ? mutex_trylock+0x1e0/0x1e0 [ 286.437286][ T9592] ? find_held_lock+0x35/0x130 [ 286.437355][ T9592] ? ___might_sleep+0x163/0x280 [ 286.437373][ T9592] ? __might_sleep+0x95/0x190 [ 286.437392][ T9592] snd_pcm_oss_make_ready_locked+0xbc/0x130 05:44:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xf6ffffff) [ 286.437409][ T9592] snd_pcm_oss_write+0x42b/0x8f0 [ 286.437431][ T9592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.437454][ T9592] __vfs_write+0x8d/0x110 [ 286.437466][ T9592] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 286.437498][ T9592] vfs_write+0x20c/0x580 [ 286.437519][ T9592] ksys_write+0xea/0x1f0 [ 286.452287][ T9592] ? __ia32_sys_read+0xb0/0xb0 [ 286.452307][ T9592] ? do_syscall_64+0x26/0x610 [ 286.452322][ T9592] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.452336][ T9592] ? do_syscall_64+0x26/0x610 05:44:53 executing program 3: r0 = dup(0xffffffffffffff9c) open$dir(0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050d0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x9}, 0x2) [ 286.452357][ T9592] __x64_sys_write+0x73/0xb0 [ 286.463421][ T9592] do_syscall_64+0x103/0x610 [ 286.463442][ T9592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.463455][ T9592] RIP: 0033:0x457f29 [ 286.463471][ T9592] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.463479][ T9592] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:44:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xffffff8c) 05:44:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 286.479476][ T9592] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 286.479500][ T9592] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 286.479509][ T9592] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 286.479518][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 286.479528][ T9592] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 05:44:54 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) [ 286.896297][ T9633] FAULT_INJECTION: forcing a failure. [ 286.896297][ T9633] name failslab, interval 1, probability 0, space 0, times 0 [ 286.927448][ T9633] CPU: 0 PID: 9633 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 286.935026][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.945086][ T9633] Call Trace: [ 286.948391][ T9633] dump_stack+0x172/0x1f0 [ 286.952755][ T9633] should_fail.cold+0xa/0x15 [ 286.957358][ T9633] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 286.963206][ T9633] ? ___might_sleep+0x163/0x280 [ 286.968069][ T9633] __should_failslab+0x121/0x190 [ 286.973020][ T9633] should_failslab+0x9/0x14 [ 286.977526][ T9633] kmem_cache_alloc_trace+0x2d1/0x760 [ 286.982923][ T9633] snd_pcm_oss_change_params_locked+0x1df/0x3750 [ 286.989261][ T9633] ? __mutex_lock+0x3cd/0x1310 [ 286.994036][ T9633] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 287.000576][ T9633] ? mutex_trylock+0x1e0/0x1e0 [ 287.005349][ T9633] ? find_held_lock+0x35/0x130 [ 287.010130][ T9633] ? ___might_sleep+0x163/0x280 [ 287.014994][ T9633] ? __might_sleep+0x95/0x190 [ 287.019689][ T9633] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 287.025588][ T9633] snd_pcm_oss_write+0x42b/0x8f0 [ 287.030562][ T9633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.036819][ T9633] __vfs_write+0x8d/0x110 [ 287.041153][ T9633] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 287.046718][ T9633] vfs_write+0x20c/0x580 [ 287.046740][ T9633] ksys_write+0xea/0x1f0 [ 287.046758][ T9633] ? __ia32_sys_read+0xb0/0xb0 [ 287.046776][ T9633] ? do_syscall_64+0x26/0x610 [ 287.046791][ T9633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.046805][ T9633] ? do_syscall_64+0x26/0x610 [ 287.046826][ T9633] __x64_sys_write+0x73/0xb0 [ 287.080046][ T9633] do_syscall_64+0x103/0x610 [ 287.084660][ T9633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.090568][ T9633] RIP: 0033:0x457f29 [ 287.094482][ T9633] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.114086][ T9633] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.122511][ T9633] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 287.130484][ T9633] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 287.138474][ T9633] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:44:54 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 05:44:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xffffffeb) 05:44:54 executing program 2: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 05:44:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 287.146448][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 287.154422][ T9633] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 05:44:54 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:54 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0xc10, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) [ 287.222369][ T9655] cgroup: fork rejected by pids controller in /syz2 05:44:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xfffffff6) [ 287.307817][ T9670] FAULT_INJECTION: forcing a failure. [ 287.307817][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 287.357862][ T9670] CPU: 0 PID: 9670 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 287.365445][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.375857][ T9670] Call Trace: [ 287.379169][ T9670] dump_stack+0x172/0x1f0 [ 287.383524][ T9670] should_fail.cold+0xa/0x15 [ 287.388134][ T9670] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 287.393955][ T9670] ? ___might_sleep+0x163/0x280 [ 287.398844][ T9670] __should_failslab+0x121/0x190 [ 287.403838][ T9670] should_failslab+0x9/0x14 [ 287.408365][ T9670] kmem_cache_alloc_trace+0x2d1/0x760 [ 287.413753][ T9670] snd_pcm_oss_change_params_locked+0x217/0x3750 [ 287.420107][ T9670] ? __mutex_lock+0x3cd/0x1310 [ 287.424896][ T9670] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 287.431400][ T9670] ? mutex_trylock+0x1e0/0x1e0 [ 287.436181][ T9670] ? find_held_lock+0x35/0x130 [ 287.440964][ T9670] ? ___might_sleep+0x163/0x280 [ 287.445828][ T9670] ? __might_sleep+0x95/0x190 [ 287.450511][ T9670] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 287.456556][ T9670] snd_pcm_oss_write+0x42b/0x8f0 [ 287.461501][ T9670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.467751][ T9670] __vfs_write+0x8d/0x110 [ 287.472082][ T9670] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 287.477638][ T9670] vfs_write+0x20c/0x580 [ 287.482325][ T9670] ksys_write+0xea/0x1f0 [ 287.486577][ T9670] ? __ia32_sys_read+0xb0/0xb0 [ 287.491349][ T9670] ? do_syscall_64+0x26/0x610 [ 287.496030][ T9670] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.502096][ T9670] ? do_syscall_64+0x26/0x610 [ 287.506785][ T9670] __x64_sys_write+0x73/0xb0 [ 287.511684][ T9670] do_syscall_64+0x103/0x610 [ 287.516285][ T9670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.522178][ T9670] RIP: 0033:0x457f29 [ 287.526081][ T9670] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.545686][ T9670] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:44:54 executing program 3: r0 = dup(0xffffffffffffff9c) open$dir(0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050d0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x9}, 0x2) 05:44:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 287.554099][ T9670] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 287.562071][ T9670] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 287.570045][ T9670] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 287.578019][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 287.585996][ T9670] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 05:44:54 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup3(r1, r1, 0x80000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000000)) recvfrom(r2, &(0x7f0000000100)=""/33, 0x21, 0x12000, &(0x7f0000000180)=@rc={0x1f, {0x1, 0xfff, 0x6, 0x8, 0xc16, 0x7}, 0x2}, 0x80) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x100000000000000) 05:44:55 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x3) 05:44:55 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 05:44:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ne\xe8x\x10\xac@)PJ') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') fstatfs(r0, &(0x7f0000000280)=""/1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/129, 0x81}, 0x40002000) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000440)={0x1, 0x0, {0x404, 0x2, 0x1, 0x401}}) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 05:44:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), 0x4) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x200000000000000) 05:44:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:55 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) [ 288.116539][ T9732] FAULT_INJECTION: forcing a failure. [ 288.116539][ T9732] name failslab, interval 1, probability 0, space 0, times 0 05:44:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x804000000000000) [ 288.166213][ T9732] CPU: 1 PID: 9732 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 288.173773][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.183830][ T9732] Call Trace: [ 288.187133][ T9732] dump_stack+0x172/0x1f0 [ 288.191502][ T9732] should_fail.cold+0xa/0x15 [ 288.196128][ T9732] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 288.201978][ T9732] ? ___might_sleep+0x163/0x280 [ 288.206838][ T9732] __should_failslab+0x121/0x190 [ 288.211786][ T9732] should_failslab+0x9/0x14 05:44:55 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8028002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7f, 0x980) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="e2b7d6ab840eabfd"]) [ 288.216296][ T9732] __kmalloc+0x2dc/0x740 [ 288.220706][ T9732] ? unwind_get_return_address+0x61/0xa0 [ 288.226384][ T9732] ? __save_stack_trace+0x8a/0xf0 [ 288.231462][ T9732] ? constrain_params_by_rules+0x118/0x1180 [ 288.237390][ T9732] constrain_params_by_rules+0x118/0x1180 [ 288.243129][ T9732] ? save_stack+0xa9/0xd0 [ 288.247472][ T9732] ? save_stack+0x45/0xd0 [ 288.251818][ T9732] ? kmem_cache_alloc_trace+0x151/0x760 [ 288.257494][ T9732] ? snd_pcm_oss_change_params_locked+0x217/0x3750 [ 288.264004][ T9732] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 288.269820][ T9732] ? vfs_write+0x20c/0x580 [ 288.274243][ T9732] ? ksys_write+0xea/0x1f0 [ 288.278678][ T9732] ? __x64_sys_write+0x73/0xb0 [ 288.283447][ T9732] ? do_syscall_64+0x103/0x610 [ 288.288236][ T9732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.294742][ T9732] ? perf_trace_lock+0xeb/0x510 [ 288.299614][ T9732] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 288.305343][ T9732] ? snd_interval_refine+0x42a/0x720 [ 288.310641][ T9732] snd_pcm_hw_refine+0xbf9/0xf20 05:44:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3000000000000000) [ 288.315596][ T9732] ? constrain_params_by_rules+0x1180/0x1180 [ 288.321596][ T9732] ? snd_pcm_oss_change_params_locked+0x217/0x3750 [ 288.328160][ T9732] ? rcu_read_lock_sched_held+0x110/0x130 [ 288.333911][ T9732] ? memset+0x32/0x40 [ 288.337907][ T9732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.344250][ T9732] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 288.349737][ T9732] snd_pcm_oss_change_params_locked+0x6c2/0x3750 [ 288.356089][ T9732] ? __mutex_lock+0x3cd/0x1310 [ 288.360880][ T9732] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 288.367407][ T9732] ? mutex_trylock+0x1e0/0x1e0 [ 288.372183][ T9732] ? find_held_lock+0x35/0x130 [ 288.377034][ T9732] ? __might_sleep+0x95/0x190 [ 288.381769][ T9732] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 288.387687][ T9732] snd_pcm_oss_write+0x42b/0x8f0 [ 288.392636][ T9732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.398897][ T9732] __vfs_write+0x8d/0x110 [ 288.403244][ T9732] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 288.408796][ T9732] vfs_write+0x20c/0x580 [ 288.413062][ T9732] ksys_write+0xea/0x1f0 [ 288.417331][ T9732] ? __ia32_sys_read+0xb0/0xb0 [ 288.422133][ T9732] ? do_syscall_64+0x26/0x610 [ 288.426814][ T9732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.432882][ T9732] ? do_syscall_64+0x26/0x610 [ 288.437607][ T9732] __x64_sys_write+0x73/0xb0 [ 288.442209][ T9732] do_syscall_64+0x103/0x610 [ 288.447156][ T9732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.453058][ T9732] RIP: 0033:0x457f29 05:44:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3f00000000000000) [ 288.456956][ T9732] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.476554][ T9732] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.484959][ T9732] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 288.484969][ T9732] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 288.484977][ T9732] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.484986][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 05:44:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 288.484994][ T9732] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 05:44:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x8cffffff00000000) [ 288.648031][ T9733] overlayfs: filesystem on './file0' not supported as upperdir 05:44:56 executing program 1: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 05:44:56 executing program 0 (fault-call:2 fault-nth:4): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ne\xe8x\x10\xac@)PJ') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') fstatfs(r0, &(0x7f0000000280)=""/1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/129, 0x81}, 0x40002000) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000440)={0x1, 0x0, {0x404, 0x2, 0x1, 0x401}}) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 05:44:56 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffff801, 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x5, 0xb16b3b9f618ca7b0, 0x3}, 0x1, 0x1000}) clone(0x2000000008000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x80000001, 0x30}, &(0x7f0000000200)=0xc) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) 05:44:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xebffffff00000000) [ 289.016514][ T9786] FAULT_INJECTION: forcing a failure. [ 289.016514][ T9786] name failslab, interval 1, probability 0, space 0, times 0 [ 289.068975][ T9786] CPU: 0 PID: 9786 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 289.076560][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.086704][ T9786] Call Trace: [ 289.090035][ T9786] dump_stack+0x172/0x1f0 [ 289.094394][ T9786] should_fail.cold+0xa/0x15 [ 289.099005][ T9786] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 289.104827][ T9786] ? ___might_sleep+0x163/0x280 [ 289.109691][ T9786] __should_failslab+0x121/0x190 [ 289.114638][ T9786] should_failslab+0x9/0x14 [ 289.119181][ T9786] kmem_cache_alloc_trace+0x2d1/0x760 [ 289.124558][ T9786] ? memset+0x32/0x40 [ 289.128554][ T9786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.134796][ T9786] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 289.140284][ T9786] snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 289.146656][ T9786] ? __mutex_lock+0x3cd/0x1310 [ 289.151434][ T9786] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 289.157955][ T9786] ? mutex_trylock+0x1e0/0x1e0 [ 289.162730][ T9786] ? find_held_lock+0x35/0x130 [ 289.167511][ T9786] ? __might_sleep+0x95/0x190 [ 289.172202][ T9786] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 289.178135][ T9786] snd_pcm_oss_write+0x42b/0x8f0 [ 289.183101][ T9786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.189360][ T9786] __vfs_write+0x8d/0x110 [ 289.193693][ T9786] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 289.199250][ T9786] vfs_write+0x20c/0x580 [ 289.203504][ T9786] ksys_write+0xea/0x1f0 [ 289.207766][ T9786] ? __ia32_sys_read+0xb0/0xb0 [ 289.212536][ T9786] ? do_syscall_64+0x26/0x610 [ 289.217222][ T9786] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.223290][ T9786] ? do_syscall_64+0x26/0x610 [ 289.227977][ T9786] __x64_sys_write+0x73/0xb0 [ 289.232585][ T9786] do_syscall_64+0x103/0x610 [ 289.237198][ T9786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.243091][ T9786] RIP: 0033:0x457f29 [ 289.247004][ T9786] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:44:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xf6ffffff00000000) [ 289.266612][ T9786] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.275042][ T9786] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 289.283038][ T9786] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 289.291017][ T9786] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 289.299000][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 289.306976][ T9786] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 05:44:56 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x1, 0x2, [{r1, 0x0, 0x10001fffff000, 0xfffff000}, {r2, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}]}) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x200000, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) 05:44:56 executing program 0 (fault-call:2 fault-nth:5): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0xffffffff00000000) 05:44:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 289.596235][ T9934] FAULT_INJECTION: forcing a failure. [ 289.596235][ T9934] name failslab, interval 1, probability 0, space 0, times 0 [ 289.648099][ T9934] CPU: 1 PID: 9934 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 289.655663][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.665732][ T9934] Call Trace: [ 289.669052][ T9934] dump_stack+0x172/0x1f0 [ 289.673398][ T9934] should_fail.cold+0xa/0x15 [ 289.678012][ T9934] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 289.683829][ T9934] ? ___might_sleep+0x163/0x280 [ 289.688697][ T9934] __should_failslab+0x121/0x190 [ 289.693637][ T9934] should_failslab+0x9/0x14 [ 289.698159][ T9934] __kmalloc+0x2dc/0x740 [ 289.702405][ T9934] ? unwind_get_return_address+0x61/0xa0 [ 289.708041][ T9934] ? __save_stack_trace+0x8a/0xf0 [ 289.713075][ T9934] ? constrain_params_by_rules+0x118/0x1180 [ 289.718988][ T9934] constrain_params_by_rules+0x118/0x1180 [ 289.724722][ T9934] ? save_stack+0xa9/0xd0 [ 289.729055][ T9934] ? save_stack+0x45/0xd0 [ 289.733388][ T9934] ? kmem_cache_alloc_trace+0x151/0x760 [ 289.738934][ T9934] ? snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 289.745455][ T9934] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 289.751309][ T9934] ? vfs_write+0x20c/0x580 [ 289.755741][ T9934] ? ksys_write+0xea/0x1f0 [ 289.760153][ T9934] ? __x64_sys_write+0x73/0xb0 [ 289.764928][ T9934] ? do_syscall_64+0x103/0x610 [ 289.769698][ T9934] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.775897][ T9934] ? perf_trace_lock+0xeb/0x510 [ 289.780747][ T9934] ? _raw_spin_unlock_irq+0x5e/0x90 [ 289.785968][ T9934] ? __lockdep_free_key_range+0x120/0x120 [ 289.786003][ T9934] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 289.786033][ T9934] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 289.786056][ T9934] ? snd_interval_refine+0x42a/0x720 [ 289.808884][ T9934] snd_pcm_hw_refine+0xbf9/0xf20 [ 289.813862][ T9934] ? constrain_params_by_rules+0x1180/0x1180 [ 289.819855][ T9934] ? snd_interval_refine+0x42a/0x720 [ 289.825150][ T9934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.825166][ T9934] ? _snd_pcm_hw_param_set.constprop.0+0x282/0x590 [ 289.825195][ T9934] ? snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 289.825210][ T9934] ? rcu_read_lock_sched_held+0x110/0x130 [ 289.825225][ T9934] ? snd_pcm_oss_open+0x60/0x60 [ 289.825260][ T9934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.850200][ T9934] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 289.866695][ T9934] snd_pcm_oss_change_params_locked+0xc99/0x3750 [ 289.866728][ T9934] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 289.879544][ T9934] ? mutex_trylock+0x1e0/0x1e0 [ 289.884307][ T9934] ? find_held_lock+0x35/0x130 [ 289.889090][ T9934] ? __might_sleep+0x95/0x190 [ 289.893775][ T9934] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 289.899699][ T9934] snd_pcm_oss_write+0x42b/0x8f0 [ 289.904644][ T9934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.910916][ T9934] __vfs_write+0x8d/0x110 [ 289.915250][ T9934] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 289.920845][ T9934] vfs_write+0x20c/0x580 [ 289.925103][ T9934] ksys_write+0xea/0x1f0 [ 289.929349][ T9934] ? __ia32_sys_read+0xb0/0xb0 [ 289.934118][ T9934] ? do_syscall_64+0x26/0x610 [ 289.938797][ T9934] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.944866][ T9934] ? do_syscall_64+0x26/0x610 [ 289.949559][ T9934] __x64_sys_write+0x73/0xb0 [ 289.954156][ T9934] do_syscall_64+0x103/0x610 [ 289.958754][ T9934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.964649][ T9934] RIP: 0033:0x457f29 [ 289.968560][ T9934] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.988258][ T9934] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.996687][ T9934] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 290.004662][ T9934] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 290.012634][ T9934] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 290.020628][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 290.028612][ T9934] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 05:44:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10010, r0, 0x1d) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:57 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x3, 0x0, 0x9, 0x1ff, 0x9, 0x7fffffff00000}}, 0x8) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000080)) 05:44:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='wlan1(ppp0!trustedeth1\x00') clone(0x8a020002106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x208080, 0x0) execveat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x800000001100) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) recvfrom$ax25(r1, &(0x7f0000000340)=""/77, 0x4d, 0x2000, &(0x7f00000002c0)={{0x3, @bcast, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 05:44:57 executing program 3 (fault-call:0 fault-nth:0): pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 290.319300][T10036] Unknown ioctl -2139050335 05:44:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = geteuid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, r3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setuid(r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000008c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000940)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}]}, 0x4c}}, 0x40) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) connect$caif(r3, &(0x7f0000000080)=@dgm={0x25, 0xfffffffffffffff7, 0x1}, 0x18) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0xc, &(0x7f00000000c0)='/dev/radio#\x00'}, 0x30) process_vm_readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000200)=""/196, 0xc4}], 0x4, &(0x7f0000000840)=[{&(0x7f0000000340)=""/82, 0x52}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/209, 0xd1}], 0x6, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x140) getresuid(&(0x7f0000000a80), &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)=0x0) write$P9_RGETATTR(r3, &(0x7f0000000c00)={0xa0, 0x19, 0x1, {0x100, {0x4, 0x1, 0x7}, 0x100, r5, r6, 0x3, 0x3, 0x2, 0xffffffff, 0x1b3a000, 0x2, 0x4, 0xffffffffffffffb3, 0x40, 0x9, 0x8, 0x0, 0x200, 0xa8f, 0x1}}, 0xa0) 05:44:57 executing program 0 (fault-call:2 fault-nth:6): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:44:57 executing program 3: pause() r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 05:44:57 executing program 2: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20800, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x6, 0xffff}) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xffff, 0x4) 05:44:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0xa400, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="031c00007593dd0053ab54caf9a744cf02365cb65176920872", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x10) r3 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, r4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @loopback}, 0x61c8}}, 0x81, 0x1, 0x100000001, 0x7ff, 0x101}, &(0x7f0000000200)=0x98) chmod(&(0x7f0000000280)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x90) getsockopt$inet6_dccp_int(r5, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffcb4) [ 290.730935][T10164] FAULT_INJECTION: forcing a failure. [ 290.730935][T10164] name failslab, interval 1, probability 0, space 0, times 0 [ 290.752801][T10164] CPU: 0 PID: 10164 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 290.760445][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.770496][T10164] Call Trace: [ 290.773844][T10164] dump_stack+0x172/0x1f0 [ 290.778225][T10164] should_fail.cold+0xa/0x15 [ 290.782833][T10164] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 290.788656][T10164] ? ___might_sleep+0x163/0x280 [ 290.793517][T10164] __should_failslab+0x121/0x190 [ 290.798468][T10164] should_failslab+0x9/0x14 [ 290.803003][T10164] kmem_cache_alloc_trace+0x2d1/0x760 [ 290.808413][T10164] snd_pcm_hw_param_near.constprop.0+0xec/0x890 [ 290.814661][T10164] ? mark_held_locks+0xa4/0xf0 [ 290.819430][T10164] ? snd_pcm_oss_change_params_locked+0x2b1c/0x3750 [ 290.826026][T10164] ? snd_pcm_oss_release_file.part.0+0xa0/0xa0 [ 290.832187][T10164] ? snd_pcm_oss_change_params_locked+0x2b1c/0x3750 [ 290.838828][T10164] snd_pcm_oss_change_params_locked+0xa0a/0x3750 [ 290.845194][T10164] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 290.851713][T10164] ? mutex_trylock+0x1e0/0x1e0 [ 290.856485][T10164] ? find_held_lock+0x35/0x130 [ 290.861288][T10164] ? __might_sleep+0x95/0x190 [ 290.866004][T10164] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 290.871917][T10164] snd_pcm_oss_write+0x42b/0x8f0 [ 290.876868][T10164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.883138][T10164] __vfs_write+0x8d/0x110 [ 290.887494][T10164] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 290.893062][T10164] vfs_write+0x20c/0x580 [ 290.897320][T10164] ksys_write+0xea/0x1f0 [ 290.901573][T10164] ? __ia32_sys_read+0xb0/0xb0 [ 290.906343][T10164] ? do_syscall_64+0x26/0x610 [ 290.911035][T10164] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.917103][T10164] ? do_syscall_64+0x26/0x610 [ 290.921812][T10164] __x64_sys_write+0x73/0xb0 [ 290.926410][T10164] do_syscall_64+0x103/0x610 05:44:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(r0, 0x0, 0xfffffffffffffcbf) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:58 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) tee(r0, r0, 0x1, 0x8) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3ff, 0x40) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000380)) sendto(r1, &(0x7f00000000c0)="bc6d9704f5bb97bcc93f74ff98118a13ee668e0addb03d0c0dddc59c91e46c4a6733588a72427867547462", 0x2b, 0x84, 0x0, 0x0) getresuid(&(0x7f0000000bc0), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000c80)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl(r0, 0x7, &(0x7f0000000280)="0e316e137c11c408fa3b1f3e46e9d64692a6f419ff61e9e3035a94e24f40a2c9b5d3d0a7ff0a96360b3919b4479589e6b14ba9e70f1ab085152795edb193e3725d78e5c40b3eea28966cc3d48f7c155eed57e8ad4be26efc58d91d85f621035e00d472226ad26b37e771e9a127f8aa0b45c4bfc472ccd3c70685f760013eb093c9d5a208a1d7d0daceeec2422b9d0a66d33b4db749314f3a0df8fd5f1283d87f5c912ee1ac73f88aa91089af150829d3b7e9ea6753600fbb4341f074c549d819e2bc8af9ebc0ebaff0028f9a0887f950510900") r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x380000000000, 0x101000) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000240)={@rand_addr="01877c0ceca3a4a9ed066dc0472d24e7", 0x80, r4}) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) [ 290.931019][T10164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.936921][T10164] RIP: 0033:0x457f29 [ 290.940819][T10164] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.960439][T10164] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.960455][T10164] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 290.960464][T10164] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 290.960472][T10164] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 290.960481][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 290.960489][T10164] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 [ 291.020115][T10164] ================================================================== [ 291.028393][T10164] BUG: KASAN: slab-out-of-bounds in default_write_copy_kernel+0xdc/0x130 [ 291.036803][T10164] Read of size 64 at addr ffff8880a9a1c400 by task syz-executor.0/10164 [ 291.036816][T10164] [ 291.036832][T10164] CPU: 0 PID: 10164 Comm: syz-executor.0 Not tainted 5.0.0+ #15 [ 291.036841][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.036846][T10164] Call Trace: [ 291.036867][T10164] dump_stack+0x172/0x1f0 [ 291.036883][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.036917][T10164] print_address_description.cold+0x7c/0x20d [ 291.047638][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.047653][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.047686][T10164] kasan_report.cold+0x1b/0x40 [ 291.047783][T10164] ? snd_pcm_stream_unlock_irq+0x40/0xc0 [ 291.065368][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.065387][T10164] check_memory_region+0x123/0x190 [ 291.065406][T10164] memcpy+0x24/0x50 [ 291.065423][T10164] default_write_copy_kernel+0xdc/0x130 [ 291.065442][T10164] ? __bpf_trace_applptr+0x40/0x40 [ 291.065455][T10164] interleaved_copy+0xd0/0x100 [ 291.065475][T10164] __snd_pcm_lib_xfer+0xea3/0x1cfa [ 291.073062][T10164] ? perf_trace_lock+0xeb/0x510 [ 291.073088][T10164] ? snd_pcm_hw_rule_step+0x440/0x440 [ 291.073105][T10164] ? __bpf_trace_applptr+0x40/0x40 [ 291.073126][T10164] ? pcm_lib_apply_appl_ptr+0x440/0x440 [ 291.084789][T10164] ? __lockdep_free_key_range+0x120/0x120 [ 291.084809][T10164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.084825][T10164] ? debug_smp_processor_id+0x3c/0x280 [ 291.084842][T10164] ? memcpy+0x46/0x50 [ 291.084857][T10164] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 291.084877][T10164] ? linear_transfer+0x74f/0x970 [ 291.096319][T10164] snd_pcm_oss_write3+0xee/0x230 [ 291.096342][T10164] io_playback_transfer+0x280/0x330 [ 291.096365][T10164] snd_pcm_plug_write_transfer+0x30c/0x400 [ 291.096386][T10164] ? snd_pcm_plug_client_channels_buf+0x450/0x450 [ 291.106746][T10164] ? snd_pcm_format_physical_width+0x75/0x90 [ 291.106764][T10164] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 291.106780][T10164] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 291.106801][T10164] snd_pcm_oss_write2+0x250/0x410 [ 291.106827][T10164] ? snd_pcm_oss_write3+0x230/0x230 [ 291.117628][T10164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.117643][T10164] ? snd_pcm_oss_prepare+0x118/0x150 [ 291.117664][T10164] snd_pcm_oss_write+0x6c2/0x8f0 [ 291.117697][T10164] __vfs_write+0x8d/0x110 [ 291.127043][T10164] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 291.127063][T10164] vfs_write+0x20c/0x580 [ 291.127085][T10164] ksys_write+0xea/0x1f0 [ 291.127103][T10164] ? __ia32_sys_read+0xb0/0xb0 [ 291.127130][T10164] ? do_syscall_64+0x26/0x610 [ 291.136971][T10164] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.136987][T10164] ? do_syscall_64+0x26/0x610 [ 291.137023][T10164] __x64_sys_write+0x73/0xb0 [ 291.146966][T10164] do_syscall_64+0x103/0x610 [ 291.146987][T10164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.147007][T10164] RIP: 0033:0x457f29 [ 291.147023][T10164] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.147039][T10164] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.347155][T10164] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 291.355118][T10164] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 291.363097][T10164] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 291.371075][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 291.379439][T10164] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 [ 291.387424][T10164] [ 291.389743][T10164] Allocated by task 10164: [ 291.394159][T10164] save_stack+0x45/0xd0 [ 291.398309][T10164] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 291.403939][T10164] kasan_kmalloc+0x9/0x10 [ 291.408262][T10164] __kmalloc_node+0x4e/0x70 [ 291.412760][T10164] kvmalloc_node+0x68/0x100 [ 291.417254][T10164] snd_pcm_plugin_alloc+0x585/0x770 [ 291.422442][T10164] snd_pcm_plug_alloc+0x212/0x330 [ 291.427482][T10164] snd_pcm_oss_change_params_locked+0x2118/0x3750 [ 291.433922][T10164] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 291.439804][T10164] snd_pcm_oss_write+0x42b/0x8f0 [ 291.444739][T10164] __vfs_write+0x8d/0x110 [ 291.449066][T10164] vfs_write+0x20c/0x580 [ 291.453301][T10164] ksys_write+0xea/0x1f0 [ 291.457559][T10164] __x64_sys_write+0x73/0xb0 [ 291.462139][T10164] do_syscall_64+0x103/0x610 [ 291.466723][T10164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.472598][T10164] [ 291.474923][T10164] Freed by task 8071: [ 291.478916][T10164] save_stack+0x45/0xd0 [ 291.483084][T10164] __kasan_slab_free+0x102/0x150 [ 291.488016][T10164] kasan_slab_free+0xe/0x10 [ 291.492507][T10164] kfree+0xcf/0x230 [ 291.496720][T10164] kvfree+0x61/0x70 [ 291.500611][T10164] __vunmap+0x345/0x450 [ 291.504792][T10164] __vfree+0x41/0xd0 [ 291.508675][T10164] vfree+0x5f/0x90 [ 291.512441][T10164] do_ipt_get_ctl+0x71a/0x930 [ 291.517164][T10164] nf_getsockopt+0x80/0xe0 [ 291.521613][T10164] ip_getsockopt+0x176/0x1d0 [ 291.526205][T10164] tcp_getsockopt+0x95/0xf0 [ 291.530740][T10164] sock_common_getsockopt+0x9a/0xe0 [ 291.535955][T10164] __sys_getsockopt+0x168/0x250 [ 291.540815][T10164] __x64_sys_getsockopt+0xbe/0x150 [ 291.545939][T10164] do_syscall_64+0x103/0x610 [ 291.550523][T10164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.556398][T10164] [ 291.558720][T10164] The buggy address belongs to the object at ffff8880a9a1c400 [ 291.558720][T10164] which belongs to the cache kmalloc-32 of size 32 [ 291.572592][T10164] The buggy address is located 0 bytes inside of [ 291.572592][T10164] 32-byte region [ffff8880a9a1c400, ffff8880a9a1c420) [ 291.585596][T10164] The buggy address belongs to the page: [ 291.591219][T10164] page:ffffea0002a68700 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880a9a1cfc1 [ 291.601353][T10164] flags: 0x1fffc0000000200(slab) [ 291.606286][T10164] raw: 01fffc0000000200 ffffea0002a58248 ffffea0002910b48 ffff88812c3f01c0 [ 291.614863][T10164] raw: ffff8880a9a1cfc1 ffff8880a9a1c000 000000010000003f 0000000000000000 [ 291.623437][T10164] page dumped because: kasan: bad access detected [ 291.629835][T10164] [ 291.632151][T10164] Memory state around the buggy address: [ 291.637779][T10164] ffff8880a9a1c300: 00 00 01 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 291.645830][T10164] ffff8880a9a1c380: 00 00 01 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 291.653883][T10164] >ffff8880a9a1c400: 00 00 00 00 fc fc fc fc fb fb fb fb fc fc fc fc [ 291.661946][T10164] ^ [ 291.667045][T10164] ffff8880a9a1c480: 00 02 fc fc fc fc fc fc 00 00 01 fc fc fc fc fc [ 291.675095][T10164] ffff8880a9a1c500: fb fb fb fb fc fc fc fc 00 01 fc fc fc fc fc fc 05:44:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0xa400, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="031c00007593dd0053ab54caf9a744cf02365cb65176920872", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x10) r3 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, r4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @loopback}, 0x61c8}}, 0x81, 0x1, 0x100000001, 0x7ff, 0x101}, &(0x7f0000000200)=0x98) chmod(&(0x7f0000000280)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x90) getsockopt$inet6_dccp_int(r5, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffcb4) 05:44:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) signalfd(r0, &(0x7f0000000040)={0x5}, 0x8) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 05:44:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, 0x0, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 05:44:58 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x8020002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001100) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) bind$packet(r1, &(0x7f0000000180)={0x11, 0x7, r2, 0x1, 0x8}, 0x14) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x406f, 0x6, 0x100000000, 0x7}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) [ 291.683140][T10164] ================================================================== [ 291.691186][T10164] Disabling lock debugging due to kernel taint 05:44:58 executing program 3: pause() r0 = gettid() r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 291.830682][T10164] Kernel panic - not syncing: panic_on_warn set ... [ 291.837322][T10164] CPU: 1 PID: 10164 Comm: syz-executor.0 Tainted: G B 5.0.0+ #15 [ 291.846330][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.856375][T10164] Call Trace: [ 291.859665][T10164] dump_stack+0x172/0x1f0 [ 291.864113][T10164] panic+0x2cb/0x65c [ 291.868017][T10164] ? __warn_printk+0xf3/0xf3 [ 291.872620][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.878353][T10164] ? preempt_schedule+0x4b/0x60 [ 291.883219][T10164] ? ___preempt_schedule+0x16/0x18 [ 291.888361][T10164] ? trace_hardirqs_on+0x5e/0x230 [ 291.893390][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.899111][T10164] end_report+0x47/0x4f [ 291.903266][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.908997][T10164] kasan_report.cold+0xe/0x40 [ 291.913716][T10164] ? snd_pcm_stream_unlock_irq+0x40/0xc0 [ 291.919346][T10164] ? default_write_copy_kernel+0xdc/0x130 [ 291.925065][T10164] check_memory_region+0x123/0x190 [ 291.930177][T10164] memcpy+0x24/0x50 [ 291.933989][T10164] default_write_copy_kernel+0xdc/0x130 [ 291.939535][T10164] ? __bpf_trace_applptr+0x40/0x40 [ 291.944672][T10164] interleaved_copy+0xd0/0x100 [ 291.949467][T10164] __snd_pcm_lib_xfer+0xea3/0x1cfa [ 291.954582][T10164] ? perf_trace_lock+0xeb/0x510 [ 291.959439][T10164] ? snd_pcm_hw_rule_step+0x440/0x440 [ 291.964808][T10164] ? __bpf_trace_applptr+0x40/0x40 [ 291.969931][T10164] ? pcm_lib_apply_appl_ptr+0x440/0x440 [ 291.975475][T10164] ? __lockdep_free_key_range+0x120/0x120 [ 291.981200][T10164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.987438][T10164] ? debug_smp_processor_id+0x3c/0x280 [ 291.992908][T10164] ? memcpy+0x46/0x50 [ 291.996912][T10164] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 292.002642][T10164] ? linear_transfer+0x74f/0x970 [ 292.007586][T10164] snd_pcm_oss_write3+0xee/0x230 [ 292.012529][T10164] io_playback_transfer+0x280/0x330 [ 292.017734][T10164] snd_pcm_plug_write_transfer+0x30c/0x400 [ 292.023541][T10164] ? snd_pcm_plug_client_channels_buf+0x450/0x450 05:44:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioprio_set$uid(0x3, 0x0, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffd31) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 292.029953][T10164] ? snd_pcm_format_physical_width+0x75/0x90 [ 292.035939][T10164] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 292.041662][T10164] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 292.048101][T10164] snd_pcm_oss_write2+0x250/0x410 [ 292.052196][ T3873] kobject: 'loop2' (00000000436c1bc6): kobject_uevent_env [ 292.053128][T10164] ? snd_pcm_oss_write3+0x230/0x230 [ 292.053144][T10164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 292.053157][T10164] ? snd_pcm_oss_prepare+0x118/0x150 [ 292.053176][T10164] snd_pcm_oss_write+0x6c2/0x8f0 [ 292.060426][ T3873] kobject: 'loop2' (00000000436c1bc6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 292.065477][T10164] __vfs_write+0x8d/0x110 [ 292.065490][T10164] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 292.065511][T10164] vfs_write+0x20c/0x580 [ 292.065535][T10164] ksys_write+0xea/0x1f0 [ 292.072271][ T3873] kobject: 'loop4' (00000000ccc23eec): kobject_uevent_env [ 292.077053][T10164] ? __ia32_sys_read+0xb0/0xb0 [ 292.077070][T10164] ? do_syscall_64+0x26/0x610 [ 292.077100][T10164] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.077128][T10164] ? do_syscall_64+0x26/0x610 [ 292.077153][T10164] __x64_sys_write+0x73/0xb0 [ 292.082139][ T3873] kobject: 'loop4' (00000000ccc23eec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 292.092199][T10164] do_syscall_64+0x103/0x610 [ 292.092216][T10164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.092227][T10164] RIP: 0033:0x457f29 [ 292.092246][T10164] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.186825][T10164] RSP: 002b:00007f314288ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.195231][T10164] RAX: ffffffffffffffda RBX: 00007f314288ac90 RCX: 0000000000457f29 [ 292.203202][T10164] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000003 [ 292.211167][T10164] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 292.219133][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314288b6d4 [ 292.227100][T10164] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000004 [ 292.235819][T10164] Kernel Offset: disabled [ 292.240137][T10164] Rebooting in 86400 seconds..