, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:45 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x8]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:45 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000000)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="757365726e76050078030000000000000000f10d8fdf64db6e87b99679bf43b571ecde5a48c4ba1d5fea62f4c7b989520276ae4c87d1cf04d79c37249693ec5db32c2826ce28f953314816bf39162195a3333f3182f2476aae2899ec8fc5bc8cd78c43929f8b5253a40a7e9bbd1b0c96dfbbc2daec955fce0932f95961a70f542f40a3c0d97924e907b0"]) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) fstatfs(r0, &(0x7f0000000300)=""/103) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:45 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, 0x0, 0x0, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:23:45 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="030100008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:45 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:45 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:45 executing program 4 (fault-call:4 fault-nth:0): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000010f, 0x0) 10:23:45 executing program 5 (fault-call:1 fault-nth:0): syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 615.335253][T32244] FAULT_INJECTION: forcing a failure. [ 615.335253][T32244] name failslab, interval 1, probability 0, space 0, times 0 [ 615.378723][T32278] FAULT_INJECTION: forcing a failure. [ 615.378723][T32278] name failslab, interval 1, probability 0, space 0, times 0 [ 615.392868][T32244] CPU: 1 PID: 32244 Comm: syz-executor.4 Not tainted 5.1.0-rc2-next-20190327 #12 [ 615.402024][T32244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.412086][T32244] Call Trace: [ 615.415397][T32244] dump_stack+0x172/0x1f0 [ 615.419751][T32244] should_fail.cold+0xa/0x15 [ 615.424358][T32244] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 615.430178][T32244] ? ___might_sleep+0x163/0x280 [ 615.435040][T32244] __should_failslab+0x121/0x190 [ 615.440018][T32244] should_failslab+0x9/0x14 [ 615.444535][T32244] __kmalloc+0x2dc/0x740 [ 615.448781][T32244] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 615.455038][T32244] ? _kstrtoull+0x14c/0x200 [ 615.459543][T32244] ? _parse_integer+0x190/0x190 [ 615.464418][T32244] ? rw_copy_check_uvector+0x28c/0x330 [ 615.469882][T32244] rw_copy_check_uvector+0x28c/0x330 [ 615.475179][T32244] import_iovec+0xbf/0x200 [ 615.479601][T32244] ? dup_iter+0x260/0x260 [ 615.483936][T32244] ? __fget+0x35a/0x550 [ 615.488106][T32244] vfs_readv+0xc6/0x160 [ 615.492272][T32244] ? lock_downgrade+0x880/0x880 [ 615.497129][T32244] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 615.503204][T32244] ? kasan_check_read+0x11/0x20 [ 615.508059][T32244] ? __fget+0x381/0x550 [ 615.512222][T32244] ? ksys_dup3+0x3e0/0x3e0 [ 615.516650][T32244] ? wait_for_completion+0x440/0x440 [ 615.521939][T32244] ? __fget_light+0x1a9/0x230 [ 615.526628][T32244] do_preadv+0x1c4/0x280 [ 615.531501][T32244] ? do_readv+0x290/0x290 [ 615.535835][T32244] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 615.541384][T32244] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 615.546846][T32244] ? do_syscall_64+0x26/0x610 [ 615.551532][T32244] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.557604][T32244] ? do_syscall_64+0x26/0x610 [ 615.562297][T32244] __x64_sys_preadv+0x9a/0xf0 [ 615.566988][T32244] do_syscall_64+0x103/0x610 [ 615.571598][T32244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.577495][T32244] RIP: 0033:0x458209 [ 615.581393][T32244] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 615.601001][T32244] RSP: 002b:00007efc93fa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 615.609422][T32244] RAX: ffffffffffffffda RBX: 00007efc93fa9c90 RCX: 0000000000458209 [ 615.617398][T32244] RDX: 100000000000010f RSI: 0000000020000480 RDI: 0000000000000004 [ 615.625372][T32244] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 615.633354][T32244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc93faa6d4 [ 615.642856][T32244] R13: 00000000004c4c8e R14: 00000000004d85a8 R15: 0000000000000005 [ 615.650944][T32278] CPU: 0 PID: 32278 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 615.660077][T32278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.670137][T32278] Call Trace: [ 615.673436][T32278] dump_stack+0x172/0x1f0 [ 615.677865][T32278] should_fail.cold+0xa/0x15 [ 615.682474][T32278] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 615.688304][T32278] ? ___might_sleep+0x163/0x280 [ 615.693165][T32278] __should_failslab+0x121/0x190 [ 615.693183][T32278] should_failslab+0x9/0x14 [ 615.693199][T32278] kmem_cache_alloc+0x2b2/0x6f0 [ 615.693221][T32278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.693239][T32278] vm_area_dup+0x21/0x170 [ 615.693265][T32278] __split_vma+0xad/0x570 [ 615.722395][T32278] ? find_vma+0x30/0x170 10:23:45 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000440)) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000006c0)=0x10) r3 = add_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000100004002, 0x0) write$P9_RMKDIR(r4, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x8, 0x2, 0x4}}, 0x14) prctl$PR_SET_UNALIGN(0x6, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) write$binfmt_misc(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7bc36dcf1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb93"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r8, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0xfffffce4}]) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = dup2(r9, r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x34, r6, 0x110, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}}, 0x0) ioctl$KVM_SMI(r10, 0xaeb7) [ 615.726649][T32278] __do_munmap+0x2ef/0xef0 [ 615.731083][T32278] mmap_region+0x227/0x1770 [ 615.735599][T32278] ? __x64_sys_brk+0x760/0x760 [ 615.735619][T32278] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 615.735633][T32278] ? get_unmapped_area+0x295/0x3b0 [ 615.735652][T32278] do_mmap+0x8e2/0x1080 [ 615.735740][T32278] vm_mmap_pgoff+0x1c5/0x230 [ 615.735765][T32278] ? vma_is_stack_for_current+0xd0/0xd0 [ 615.766120][T32278] ? wait_for_completion+0x440/0x440 [ 615.771429][T32278] ksys_mmap_pgoff+0xf7/0x630 [ 615.776119][T32278] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 615.781756][T32278] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 615.787219][T32278] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 615.792698][T32278] ? do_syscall_64+0x26/0x610 [ 615.797388][T32278] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.803529][T32278] __x64_sys_mmap+0xe9/0x1b0 [ 615.808138][T32278] do_syscall_64+0x103/0x610 [ 615.812749][T32278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.812761][T32278] RIP: 0033:0x458209 [ 615.812776][T32278] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 615.812784][T32278] RSP: 002b:00007f90b302cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 615.812796][T32278] RAX: ffffffffffffffda RBX: 00007f90b302cc90 RCX: 0000000000458209 [ 615.812804][T32278] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 615.812813][T32278] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 615.812820][T32278] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f90b302d6d4 [ 615.812827][T32278] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000004 10:23:46 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x8]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:46 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8100000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:46 executing program 5 (fault-call:1 fault-nth:1): syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:46 executing program 4 (fault-call:4 fault-nth:1): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000010f, 0x0) 10:23:46 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000060887c57868694a2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x1, 0x2, 'client1\x00', 0x3, "56c7032013e37faa", "4a6e6e8fe773f65346d17b1f2e148042102e2b8338fe12597e8a8356cd64e25d", 0x8, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000400)={r2, 0x4, &(0x7f0000000240)=[0x7fff, 0x6, 0xbf7, 0x4], &(0x7f00000002c0)=[0x80, 0xfffffffffffffffc], 0x0, 0x1, 0x101, &(0x7f0000000380)=[0x3], &(0x7f00000003c0)=[0x401]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2216aaaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3bf90c0f33ae81f03105a30d50e3f81a5ee1347e9c7c110a3135ad5f7e7f136c36fa300aff5f3b039afa1689dc420dc94a3eb03aa03cb48a82a0e826c9c4bc9561b8dac16a3f05abaf8427f7f429d80a305da03e7dbd7a7a4fe03f61bfcdb045609"], 0x104) io_setup(0x101, &(0x7f0000000040)) r4 = socket$xdp(0x2c, 0x3, 0x0) dup2(r4, r0) 10:23:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x0) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) [ 616.213335][T32307] FAULT_INJECTION: forcing a failure. [ 616.213335][T32307] name failslab, interval 1, probability 0, space 0, times 0 [ 616.231116][T32310] FAULT_INJECTION: forcing a failure. [ 616.231116][T32310] name failslab, interval 1, probability 0, space 0, times 0 [ 616.233326][T32307] CPU: 0 PID: 32307 Comm: syz-executor.4 Not tainted 5.1.0-rc2-next-20190327 #12 [ 616.253093][T32307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:23:46 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x86ddffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 616.263150][T32307] Call Trace: [ 616.266450][T32307] dump_stack+0x172/0x1f0 [ 616.270793][T32307] should_fail.cold+0xa/0x15 [ 616.275400][T32307] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 616.281221][T32307] ? ___might_sleep+0x163/0x280 [ 616.286192][T32307] __should_failslab+0x121/0x190 [ 616.291147][T32307] should_failslab+0x9/0x14 [ 616.295663][T32307] kmem_cache_alloc_node_trace+0x270/0x720 [ 616.301482][T32307] ? fsnotify+0x811/0xbc0 [ 616.305837][T32307] __kmalloc_node+0x3d/0x70 [ 616.310353][T32307] kvmalloc_node+0x68/0x100 [ 616.314869][T32307] seq_read+0x832/0x1130 [ 616.319130][T32307] ? rw_verify_area+0x118/0x360 [ 616.323996][T32307] do_iter_read+0x4a9/0x660 [ 616.328516][T32307] ? dup_iter+0x260/0x260 [ 616.332866][T32307] vfs_readv+0xf0/0x160 [ 616.337027][T32307] ? lock_downgrade+0x880/0x880 [ 616.341893][T32307] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 616.347967][T32307] ? kasan_check_read+0x11/0x20 [ 616.352840][T32307] ? ksys_dup3+0x3e0/0x3e0 [ 616.357273][T32307] ? wait_for_completion+0x440/0x440 [ 616.362565][T32307] ? __fget_light+0x1a9/0x230 [ 616.367262][T32307] do_preadv+0x1c4/0x280 [ 616.371601][T32307] ? do_readv+0x290/0x290 [ 616.375937][T32307] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 616.381405][T32307] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 616.386871][T32307] ? do_syscall_64+0x26/0x610 [ 616.391554][T32307] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 616.397630][T32307] ? do_syscall_64+0x26/0x610 [ 616.402326][T32307] __x64_sys_preadv+0x9a/0xf0 [ 616.407011][T32307] do_syscall_64+0x103/0x610 [ 616.411610][T32307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 616.417506][T32307] RIP: 0033:0x458209 [ 616.421410][T32307] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 616.441019][T32307] RSP: 002b:00007efc93fa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 616.449441][T32307] RAX: ffffffffffffffda RBX: 00007efc93fa9c90 RCX: 0000000000458209 [ 616.457416][T32307] RDX: 100000000000010f RSI: 0000000020000480 RDI: 0000000000000004 [ 616.465398][T32307] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 616.473376][T32307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc93faa6d4 [ 616.481351][T32307] R13: 00000000004c4c8e R14: 00000000004d85a8 R15: 0000000000000005 [ 616.499355][T32310] CPU: 1 PID: 32310 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 616.508502][T32310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.518555][T32310] Call Trace: [ 616.521858][T32310] dump_stack+0x172/0x1f0 [ 616.526200][T32310] should_fail.cold+0xa/0x15 [ 616.530856][T32310] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 616.536693][T32310] __should_failslab+0x121/0x190 [ 616.543469][T32310] should_failslab+0x9/0x14 [ 616.547983][T32310] kmem_cache_alloc+0x47/0x6f0 [ 616.552757][T32310] ? vm_area_dup+0x21/0x170 [ 616.557261][T32310] ? rcu_read_lock_sched_held+0x110/0x130 [ 616.562986][T32310] anon_vma_clone+0xde/0x480 [ 616.567598][T32310] __split_vma+0x180/0x570 [ 616.572030][T32310] ? find_vma+0x30/0x170 [ 616.576283][T32310] __do_munmap+0x2ef/0xef0 [ 616.580719][T32310] mmap_region+0x227/0x1770 [ 616.585246][T32310] ? __x64_sys_brk+0x760/0x760 [ 616.590116][T32310] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 616.596390][T32310] ? get_unmapped_area+0x295/0x3b0 [ 616.601517][T32310] do_mmap+0x8e2/0x1080 [ 616.605690][T32310] vm_mmap_pgoff+0x1c5/0x230 [ 616.610300][T32310] ? vma_is_stack_for_current+0xd0/0xd0 [ 616.615864][T32310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 616.621336][T32310] ? retint_kernel+0x2d/0x2d [ 616.625926][T32310] ? trace_hardirqs_on_caller+0x6a/0x220 [ 616.625946][T32310] ksys_mmap_pgoff+0xf7/0x630 [ 616.625964][T32310] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 616.625979][T32310] ? retint_kernel+0x2d/0x2d [ 616.626000][T32310] __x64_sys_mmap+0xe9/0x1b0 [ 616.626026][T32310] ? do_syscall_64+0x54/0x610 [ 616.655877][T32310] ? do_syscall_64+0x5b/0x610 [ 616.660557][T32310] do_syscall_64+0x103/0x610 [ 616.665135][T32310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 616.671026][T32310] RIP: 0033:0x458209 [ 616.674902][T32310] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 616.694491][T32310] RSP: 002b:00007f90b302cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 616.702895][T32310] RAX: ffffffffffffffda RBX: 00007f90b302cc90 RCX: 0000000000458209 10:23:46 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x0]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:46 executing program 4 (fault-call:4 fault-nth:2): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000010f, 0x0) 10:23:46 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8847000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 616.710868][T32310] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 616.718823][T32310] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 616.726780][T32310] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f90b302d6d4 [ 616.734740][T32310] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000004 10:23:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0xaa01, 0x0) write$P9_RWRITE(r2, &(0x7f0000000480)={0xb, 0x77, 0x1, 0x1}, 0xb) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x2000000000003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000004c0)={'icmp\x00'}, &(0x7f0000000500)=0x1e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) fsetxattr$security_smack_transmute(r3, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d10800b0b679aa2aafadc8ff4162836a567177701ac5fdce60d3eb930e566700000000000000"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c69000/0x1000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) dup2(r7, r0) 10:23:47 executing program 5 (fault-call:1 fault-nth:2): syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000010f, 0x0) 10:23:47 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9f94, 0x400) connect$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000440)={r3, 0x4, &(0x7f00000002c0)=[0x5, 0x6, 0x5, 0x5], &(0x7f0000000380)=[0x5bf6, 0x800], 0x2, 0x6, 0x20000000, &(0x7f00000003c0)=[0x0, 0x7, 0x8a, 0x1, 0x101, 0x40000000000000], &(0x7f0000000400)=[0xff, 0x1, 0x8]}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x8100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x202100, 0x0) dup2(r5, r0) 10:23:47 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8848000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:47 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x0]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) [ 617.001365][T32339] FAULT_INJECTION: forcing a failure. [ 617.001365][T32339] name failslab, interval 1, probability 0, space 0, times 0 [ 617.115795][T32339] CPU: 0 PID: 32339 Comm: syz-executor.5 Not tainted 5.1.0-rc2-next-20190327 #12 [ 617.124957][T32339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.135027][T32339] Call Trace: [ 617.138340][T32339] dump_stack+0x172/0x1f0 [ 617.142687][T32339] should_fail.cold+0xa/0x15 [ 617.147308][T32339] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 617.153131][T32339] ? ___might_sleep+0x163/0x280 [ 617.157986][T32339] __should_failslab+0x121/0x190 [ 617.162934][T32339] should_failslab+0x9/0x14 [ 617.162950][T32339] kmem_cache_alloc+0x2b2/0x6f0 [ 617.162972][T32339] vm_area_dup+0x21/0x170 [ 617.162987][T32339] __split_vma+0xad/0x570 [ 617.163000][T32339] ? find_vma+0x30/0x170 [ 617.163016][T32339] __do_munmap+0x368/0xef0 [ 617.163039][T32339] mmap_region+0x227/0x1770 [ 617.163070][T32339] ? __x64_sys_brk+0x760/0x760 [ 617.198934][T32339] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 617.205190][T32339] ? get_unmapped_area+0x295/0x3b0 [ 617.210347][T32339] do_mmap+0x8e2/0x1080 [ 617.214531][T32339] vm_mmap_pgoff+0x1c5/0x230 [ 617.219133][T32339] ? vma_is_stack_for_current+0xd0/0xd0 [ 617.219152][T32339] ? wait_for_completion+0x440/0x440 [ 617.219178][T32339] ksys_mmap_pgoff+0xf7/0x630 [ 617.229993][T32339] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 617.230012][T32339] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 617.230027][T32339] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 617.230047][T32339] ? do_syscall_64+0x26/0x610 [ 617.255889][T32339] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 617.261968][T32339] __x64_sys_mmap+0xe9/0x1b0 [ 617.266572][T32339] do_syscall_64+0x103/0x610 [ 617.271177][T32339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 617.277088][T32339] RIP: 0033:0x458209 [ 617.280992][T32339] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 617.300608][T32339] RSP: 002b:00007f90b302cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 617.309057][T32339] RAX: ffffffffffffffda RBX: 00007f90b302cc90 RCX: 0000000000458209 10:23:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000002, 0x0) 10:23:47 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8864000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 617.317043][T32339] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 617.325022][T32339] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 617.332998][T32339] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f90b302d6d4 [ 617.341063][T32339] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000004 10:23:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000003, 0x0) 10:23:47 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88a8ffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:47 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000000)={0x8, 0x6, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebd8eef24116e5c59b16965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad43000090000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:47 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x0]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:47 executing program 5 (fault-call:1 fault-nth:3): syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000700000000080000ff7d"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65fd9d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd004fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e56670000000000000000000000"], 0xfffffffffffffff2) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000004, 0x0) 10:23:47 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88caffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:47 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:48 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000002c0)={0x7, 0x6, 0x9, 0x13, 0x3ff}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x6, 0x6, 0x596, 0x400, 0x0, 0x1, 0x41000, 0xf, 0x8, 0x7, 0x40, 0xfffffffffffffff8, 0x6, 0x8001, 0xffffffff, 0x81, 0xffffffffffffffc0, 0x10001, 0x6, 0x4, 0xffff, 0x92, 0xffffffff, 0x9, 0x45d9c28, 0x7, 0x101, 0x7fff, 0xe53, 0x6, 0x0, 0xfff, 0x7, 0x2, 0xff, 0xa8, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x5}, 0x400, 0x2, 0x4, 0x6b26722a670329fb, 0x5, 0x2e98a437, 0x1}, 0x0, 0x3, r1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x101, @ipv4={[], [], @remote}, 0x9}}, 0x0, 0xfffffffffffffffe}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r3, 0x2, 0xffff, 0x401, 0x80, 0x5}, &(0x7f0000000240)=0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) fcntl$setflags(r4, 0x2, 0x1) dup2(r4, r0) 10:23:48 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000005, 0x0) 10:23:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:48 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8906000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:48 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:48 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000006, 0x0) 10:23:48 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfdffffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="dc6f25fa3817c3a0a5386cdaae6ee5d0da000000448c3e9a6e00000000"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x10000, 0x40000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:48 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x7920, 0xee, 0x68d3, 0x1f, 0x8001, 0x1000, 0x100, 0x4, 0x10000, 0x3, 0x3ff, 0x27f, 0xfff}, {0xcdf3, 0x4, 0x6775, 0x6, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xfff, 0x9, 0xffffffffffffffff, 0x0, 0x3}, {0x8, 0x7ff, 0xffff, 0x17e, 0x7fffffff, 0x9, 0x1, 0x4, 0x80000001, 0x2, 0x11, 0x0, 0x3f}], 0xe8}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:48 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfeffffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:48 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000007, 0x0) 10:23:48 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfffffffffffff000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x201e, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x280) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000180)={0xff, 0x2, 0x7, 0x2}) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:23:48 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3c1693bae4ec1c178e86dca753fb0553acc63014c7fbea5b055e702e24d47bf988c67db2f589ea96add800d8aefbfe174c054b8b81db9745d8df480ca05df2cd13d5b707fec13a21537eb675043feefa6a54d01d029d742c0f67960c05ea2c223e8c843ca5cf0eb5477731bc6a6de360906a235f32adb820286be3557978c31869dd012f55a3b1671ded10782df541b241d77f893b67dbca5c8c6527fdfe59924455d0dea75039bdeadd38a72d5c1be8a4ee84a1ab258454f6563aa6b0b5d15f6507e64779bebb5e9aa617dfeee14285e0f22eae3108a2f9d96d1ec28ece2e431e95f5f3034e11b4d00134d0f793702a172bf0fa8eb7106234dee4606c2d724c84fd0d764792ce5562fc07cdfedfe09c31c0331e2cd4494161489d2d9a71a40f30b3621c82a0996160030d1581ac7123f1f8cba269b2150d3f71a1cebd47a4a72fc30e4eb19e3fda96eb798a7be17a021eb44e38d056b2180eabedbcf1109b8f4b072cc4cd3710765354c1d863e527cb741fe0bbcd3e56c7a12d0557c61320eb676a5a9087daa3c875324260d2fe17f5981380fa5f7aeca6d59a53201ea"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:48 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000008, 0x0) 10:23:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x7fffdf002000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:48 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:48 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:49 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000100)={0x8, 0x400, "f17be2b0bce1067713f96d7d903193cd8139829cc4621bef", {0x3, 0x10000}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') write$P9_RUNLINKAT(r2, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0xffffffffffffccba, 0x8202, 0x9, 0x6c, r6}, 0x10) dup2(r5, r0) 10:23:49 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000009, 0x0) 10:23:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000400000000080000ff7f867b9da5c2cd5672ce1b36d4e94910599f646c74e6eb6f45362d8a354f6da324a94ec84294e171d71464e5643de0cbad5926"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) write$P9_RATTACH(r4, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x2, 0x3, 0x6}}, 0x14) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:49 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) accept4(r1, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000000)=0x80, 0x80800) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:49 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000a, 0x0) 10:23:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8032, 0xffffffffffffffff, 0x0) 10:23:49 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000b, 0x0) 10:23:49 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000380)={0x2986, {{0xa, 0x4e21, 0x3, @empty, 0x8000}}, {{0xa, 0x4e20, 0x614, @dev={0xfe, 0x80, [], 0x20}, 0x775c}}}, 0x108) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x4, 0x0, "7c5a653b38af6bf9ea5ec487aae11aee003479b831cf75d1b1dc1ff14e3d6f1749dcb7c6593aba5a075cbc462290436673036ca5a6b695a6013fcc4d0e431d68c3a02b6e1a6022e5cee393e62a0089cb"}, 0xd8) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x723, 0x7, 0x0, 0x0, @sint={0x7, 0x4}}]}) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x8032, 0xffffffffffffffff, 0x0) 10:23:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000c, 0x0) 10:23:49 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:23:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:50 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000000008e9464a206bd25a188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9af868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a31c0c407c35ea35f23351f244be87bd0705c999226b8ab9dddd3465fffad27de534f0d38cb7d97604838ca00c248e9c6cef"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000d, 0x0) 10:23:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x7, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x127640, 0x8032, 0xffffffffffffffff, 0x0) 10:23:50 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80, 0x200) dup2(r6, r0) 10:23:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x2) 10:23:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000e, 0x0) 10:23:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1e) 10:23:50 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000f, 0x0) 10:23:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0xc67) 10:23:50 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x81, 0x412040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000300)={0x12000000, 0xda61, 0x4, {}, 0x8, 0x532}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000495450d4ff603a836ff"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000010, 0x20000000000013, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x5, 0x9, 0x63f, 0x94}, 0x8) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:23:50 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r4 = socket$xdp(0x2c, 0x3, 0x0) dup2(r4, r0) 10:23:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x14, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1e00) 10:23:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000010, 0x0) 10:23:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1f00) 10:23:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x28, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:50 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:51 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x2000) 10:23:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x60, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000011, 0x0) 10:23:51 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setgid(r2) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) r4 = socket$xdp(0x2c, 0x3, 0x0) dup2(r4, r0) 10:23:51 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000180)='/dev/nullb0\x00') write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:23:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000012, 0x0) 10:23:51 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x4000) 10:23:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:51 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x670c) 10:23:51 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x200000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_vif\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x0, 0x0) accept4$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10, 0x800) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101400, 0x0) syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0xfffffffffffffff8, 0x2000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) uname(&(0x7f0000000200)) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000100000000000000000000001000000060000000000000009000000000000000000000000000000000000000000000000000000000000003c0a431cf28f158d000000000000000002000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df8019bf08510051366cf4fc4040787f"]) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x4000000004002, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000140)={r4, r5/1000+30000}, 0x10) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c5462ad430cc000000000000000000000000003aa7f2a300"], 0xffffffffffffffe8) io_setup(0x101, &(0x7f0000000040)) r6 = socket$xdp(0x2c, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4c002, 0x0) dup2(r6, r0) 10:23:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000013, 0x0) 10:23:51 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000014, 0x0) 10:23:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x543, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:51 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x99f3) 10:23:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000015, 0x0) 10:23:51 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xfffffffffffffffe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) r1 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x8001, 0x885ff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4108000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x100012, 0xffffffffffffffff, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x200000020003) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0xc, 0x101, 0x6, {0x1ff, 0x1, 0x9, 0x8}}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') fsetxattr(r3, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', &(0x7f0000000180)='/dev/ashmem\x00', 0xc, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm, @window={0x3, 0x2, 0x66}, @window={0x3, 0x80000001, 0x4}, @window={0x3, 0x9, 0x8}], 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c7318bd1e82cb0b679aa2eafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:23:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x600, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0xf399) 10:23:52 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65fd2c015168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000016, 0x0) 10:23:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x200000) 10:23:52 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x608, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:52 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000020000000000ff00060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000017, 0x0) 10:23:52 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x689, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x400000) 10:23:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1000000) 10:23:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000018, 0x0) 10:23:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:52 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x700, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:52 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000300)=@sco, &(0x7f0000000100)=0x80) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000180)=0x3, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) write$binfmt_misc(r6, &(0x7f0000000900)=ANY=[@ANYRESOCT=r3], 0x17) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r0) 10:23:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000019, 0x0) 10:23:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x2000000) 10:23:52 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x4, 0x7fffffff, 0x101, 0x7, 0x20, 0x6, 0xf2bd}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r4 = socket$xdp(0x2c, 0x3, 0x0) dup2(r4, r0) 10:23:52 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x806, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1e000000) 10:23:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001a, 0x0) 10:23:53 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1f000000) 10:23:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001b, 0x0) 10:23:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a40)={0x0, 0x1000, "a0e0a881ed3e189ffa90b722fa31c9590e6f22d519749101cf86f685f5ad6c6e506c0af070a7843f3fdbd680d17d2028a63442c84afa746950f4cf68d3498fe56270bbc114d7c1a69a25c6314336247d212437609483026e00da9beb4ab31f48c37d9416a21dfc5c69386fe63f860deaf7ea3bca1852f6bc3fe334e2cc1dd5bb14e5599352fc040658040a1193c8f72832fc3009d24060ec4d5abc1e1be254f58dc68b74f40ab01117f8bfcf78da9e4450c6cdbbf7471f4f5bb56db9cc6e0577b5784e3184478411401fa96ca168d25f633ceaf7cf9704c44617960d2d0c292c548430473432e887630a1f290032eb2d73181bd355d8f8e8a8a92b6b9660c6a6377bfcf153ccf56ab54177a9df3535a63fdeddabaa7f9759da1ac5ab57da5001aa315d2f1b2c44382decb34bbf2fe2cbf27fe00621d03573db4e3c321875b22b659693b6efe2344f41030d6c639aeed8fdbe3746413047c36cc70c27d28e3e0e5752554a66ca5740df2f28fb24365de4a7f725f61a02dcbd73e1b8aa6c8258eef814d2e7989c2522e1f1af60e7a027478679494b0b114678d1e9f609c91ceddc201a11b944d39679c80ddd531572624996b64f2b6fa37c2b6bc43ccc5527de61636f68d7202b3289f6187f211fecbd4467446ca401d190da7f92fd30d371814f6d188e11fdd120259139555810290e6461a42241a9abe06921ed7bdef86b1514d1129d66cd0aace6e2ae356e4ae30161868e01f840c728d80099edfe30cee024b2f024a33dc501e7f84b926c9a2a750714b8303b8b658f7b1ee3cd01a79d96fb911d284aa495ec169886b30dca1043d22357c9cd888b6b15cbfe1dd732a2558fb8a54024845ad0415424ea06589ce84d7d7a286ebef7cc26c7d6b41da991a5ae51b2e7969e9f421b9849618a278cabfe223add1de20d067616b05983a976868ab8413b5e22cdb7e09e971b393fee990e00577ba63c4641965364f9280735bb25c62bcdf1496b00e663daab7c536212d54c9f3a802916e7726d2bfa4c3ef4a7d22ac1d8bea106d8e8df89a390f9cb9ab34c9e2261515ebd6e7f4d57713b651e9b2aed18164b59bcf862e0bdf3b896b066db9fce94aeed5a089c4f6702dd505bb6dad4c08540c4d868f8a9068e67032d43619ce8f33b418a47ff8f58bf79c357c98c44ff656d74edf3863e0dce3393cb0914adf17d229c7d94c0c4f2496e91b67a4d20491d9a7df6215743a8fc0c6749946e9650eaa41cb3ab5b1acf42e0a99d927fdba9439b0330fa137a22744d8b5c972d32b80866d3121d6ad47c79ffdab81094b6f1ccff165c4879241cbc1d984f8349ef877c8e6a9024a8aabeedc87efcf16156a2e171948721c67b601d5e651a631cec22e7f3252973c81c8517ffab500aea1f87d21d4e38c9631d8be1ed663c2d4c730de3cfe77fa9d2d6936dace6a7bacd5e576635e7d8867b5da16de39daeb552791887bac88427bc9fac121a97f813d54476eebfe17651201c7087ee9a94c3fb4678c157d09f57fbf6dada00e8529b5cf0ade6c55b671c8154e869e88727b86eaf85a8104ede0ee1011c053a49a89d1bb214be88cf835f43f6323c2d6ff33c094e198ae4c255f7bb4441d9cbec8cfb8593398eb0a604abf6ee86696d56b1b24bb01635a92a7f4fdde07cc912e387eeb4557c5c9e53e9aba31de2478943acdc675e8479586b2c284696fb4e5f7227072889140cd65fabe54893b11789b0cb7a6c8ac561d93dba4ef87b990aae04136b150382c0863641c1bd29a6ada4aaa97345c73c69e024c44f79bda0355873f0f46f88d12fb087c71e41ed10d35b46f4a812480494ad777e2beb7486a8a29ec375e01f6a61f3baafe802681bff742d6d44b30fc5a005a753e47d1b68af7c966dbf85d3051ac82fb87fe19e86d3a59a9c9e3a7f51ff4583c9e76ad8c523cf072352a687c6d102cc4640ee9ef5d59ceaaf833ce946c3abe3d81fafabf80f8c8826cd11c9d4594fbd2b4ea0c2d3a9dcf930ed986d8775d03bee033b4fae002dc5203ef74a1584aa971e058deaaeb05cdeec9c9ca5d39ff91be8aa6f956751d840befafcb17c1ef64f8c836bef9307b6a806969d7974b9288a0a07ff18d691c127434b5615ce60640937cec91aefe6960b9b419ece0ce9939953ab9639a2a6875cba3e2936943c803c6c3e73967abdcda7f639e4f704609a41ab70c900dbd951583856ffb4297528359844a74b92e50dbc02e06202065e871c2e770487801baac53758633ae2e3ef3e70b70108fd5616b8c4b93292b7d50147d98b56750c33b94d5569fc92e587e71d0945440c45a9c17ebc75cbbf0e809a86f403df9bb1106d94fe85c8b3d806a42134f93b2032e6aa214c22148a8b2b29ee1526447b9cd3912f958dde46544cd137586f5823b99788547e8eed7df325d388a6ff07aaefe8f9047b084eb0635c6e7d7b2ca0a2d194c0cc7dc749163b60e04c4647c8acc85ff442a48c29d70825602d3601f5868143e772da8efb6c4b778be35915ae45e301ca1dfa50961a2baa3d7d44f7c979802ce93439229daeafeda7ac64b3d46ee4da30f4ae1fc3f903dbc04527f4037a18658a1dd3a4e0c51503b3e38491c0415541e9212817e4e4c28d95c9ddeca0aa3524c554387d1fa0a4c207b48dea74a23e55c907ad334104c2685cc9661b786648677aaef668b2012693fe6549f5b9cab5e84885f39d943620023b496ef66cfb9b253ddad9b1948d53ddadf805b114a4cfae7c18e0d1f61aa4535be26ef6c4cb4e426e2dcecf0c304599cf9b1ec2481e47889eaba72415b34ef5f21ac9959efc7f8cd2a988b8f295730e3f479d2ad798b15e1de79a8e901d6f8a1e0b9ae70a9b55a45825303cf9b14dd8614f317151a386af0807b0d1d910f1f50fa9e8e6005df640dfb7ba96f56aba24c62527b48d30ca596da82e35d319cca63d3430d0a268769b82378b4c9938b32c65cb4d270cd90bd98ccd6829b9ae257a0ceab14dabaf28ec4c8462c6e5f0cd5527e97574264350bd81809361b3b4dd25ff74f20180ef600bfcc041922a46645caa083a2f1b544099c0b204f61cdc764fc897aaf0414cafc2a54a65559f9b94a81e6ac1727eec1646ea75323dec7771431c1eaf07ba11fae66741d11263adefa69b346dc46bd1fe0890c497cb61f2b72cb6d9e063ce8ec809075b2072e32433e97ce61ea9304f0dec20d12e506bca9b17307340d94b0a7e5c7f6909ae181c4999793332df62a66fe7d4edb20e824efd1e0fb9be89950b3a0e0486969d4ecc36c47eb5a9f091ef46ef455bc0094659c628a24152c7565fc58b26ea6f784c0e7aadf2837cf87d6ac86add27c3b523a15d13599ccc43ad8e1df34b675c63960526b15d660060938fb1f20946d4f9e1109b0ad26ce03eeda76f3af1baa2300f63a285d16427c76f65c99000abe0048b2e2224a2d2fc3da934b9cab69356e4bb32df29324d286a31978d99e4cd624a3a62292a71fc56611db411dc9a22f252dd913a78f7aa0824a9f867c4ed1574131625164c6f0150e62bb43978b7862c49cc8885b59200cf9a2e8376108efbf8b5a804266f32ebdd8aa4cc744ac7fa82c3debfa8480f3624557e1bb9fb74603bffc9bc70a47ce72af6aab1e8dd15a2bdbf3ec8e8cdb92e7c07a8dc94d9baababab519dc229df474b47ed107b1998cd13b29eb967066f406c295f08bde372c0780095bb9898b98d6b8694d30f20900d63bd66717abf628a0d1ee6343d25fafc38357487fa355a464d00be8ad091aac4dcca639b356130fa216d6eb801dce220f07549dc09dfb90234c930e5004bc78bf7793d3f5a88f0eff90917b50d46981fbc1093e0acec14e39ad41a5983da1e4694473b08b75013e6707da56e71925c2d84a507bbb639eceaab8813090363842ea79f5a7b82c154aa316c3a6c4df92abb7d482543d74e4c3cf010e6de461b5af45198503dac45d9f35e5b76bb125fbffa376f3a4f03c467bf3ddf667901213c46739eadb8630bd9eaac96c8a9ba79a1ac6e1eb1f5f49ea79a914a9570e59b35da1d8ed085863f0ffdf07c96fafd9ceac71e7f7c3ad19879b01ab733de653d4c7c6f911cdf5511cbeb6cce2d03bae30e421ce60b638f8a782114a229214341ac90998702ab4c79eb0336def0047915ec6acd23232ac4d8a382c178cd344327c752983c84c489fb6336fbb134f850dd728b401b1b9a52b424bd32a79734a859adf4825215b9910a5215442e63cc4c8d21f23f7558d6138abdf3255e2415a9624dfe5e9409a940889e14b21aeedc9a030e643333cd7da0249351e7daa0f437048d80a0387b056d099b75a722a774772ae9bc3f8bfa79671e4130557c0f8798ac82b14c150074c8fa6f6fe3e7d7ce3def36b15a89c4c404d20d29d1d84a01217100cdf53aa637ab879f7634c0ce0b8074962d8fc693f7f4b92aec8795480b44c5966d8afd3f2583e1ce9e0598d3edd9da9d887c384e8c84d1f9f5e2167f15e1cf86cb015aaff33149b8f428bc7fbdfbfdec573ceb25c4d42bc0374b23ef6c1d12e3001c6cdd8b3034190fac20818a17b5e740522ef81c5c4388cfbd8f844319e0ebd648a68c965ab53f32db19dbd45aa355e62af7da10efec509f1502b8345df651febda3118e384384de61941625f28b833e74a8711289f98ad2dee200ee28618e06de7072280690148c5aff90ae3acf234a91331928f182ed3649c27c2a4e95717d047a93b2ca7a05b2adfbea801af5da075754d0b6aeb4e51af8f6f1db31c11dde50b5054685597c3e960b4497fa4c2d7d161b7e7d85f8c490861a9e1527db69e7c5e0033f3ccead8948fe515a6a03bfcedcc44c42eaeaa10c7d6c11d40e1620102629f0b1985ebca68baabf3a8e837cf4eab350a392d8e34a3fbe2d655830d80ae60d70ab03e428b1b3e11ded0808d9028099a6ae24aae433c7e0fee6c8643256d16f0e4d2e272ef59dea933f27282308bd540a1c20d2d653d5053b1e160634ef6d2ca32789daf0877e050632494a601f21e1cdd566dbc646562fc8594cb9de1c7af86cfa0eec30868412da51cc9bedcf21fa0bc5dd2a4d4633f2333807e7c4a69da6edab3244973165ad8fc9b86f88b0f35d50a63c876e2a10d21093e368f3399b60fd103f4cc99734e6d38bde402651121e32a56b19ab641936ff7c9c88cdcdb59120eb87216d6cb22d8e16401098a872bf5a6b5e7dfe03055886e907edb50ce3dd39143d595984f4553a4fc344c77b9aebeef584a6888d7ed5abe1ab8f50722f91eafb2b314e180b0dcaaed9ef5e68d0790465652ed1b047fbed62b29f7563ffbfbe2990f249e9cb9acdd8c065ecae8e1ffc921f281d100b1dff750faef325626c483b66d9c6ff1054c3371c025e70da92f178524a123bab6d7224452d4b7d8cfe6cfe0a7feb7266d7b9df0f34f9304b7315c83e97bbed160856f431b8713575ae91657a1c5d29600fc78ddb5dcdee9e77b6dc9783e4ad331ee1ecbf096d455304eb89eac166d0be27f7021f67a668e10c73860ac91fa77935d4fbec6d4605c1844738367fa50663a9e43a4bbfd25e01ceba126d7457b72e2f58ddabb18d9d22067124e6632facfeefd9a1dee2f40d60b394e8c92273517be5306b10e12318309f31734f01e41e99c36da62ed80c678dad0e70f3efc1d532a923f18a43d62348d4b9403313b71aaf98565866716e52284b01a81331ffc755dd6fdbeee17613d87fd095f0dccea8bbcb578ef88ba3ded8b210da14492406bd3eba1c67f40c447d4b3ef45c7bfbc51dc95a7a2d1e2fcb1632"}, &(0x7f0000000200)=0x1008) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380)={r2, 0xee, "b2b25364be8143428acaa059c143f06c8c59d7a9487e1c54c02f8980cab2375170322e9c2ddd940f4d3b1b419e40b7880b62b23a502b3720298f2721da5164b008bdff878144bcfd8321614d0781733a50a3ba5486a196da3d6800cd4a256384c6d9f897e2ec2110656f04ef79ec5605a5bd64bdf8104d346280fa73adaeac558e407e0e83bc09d21b906d5dc4d33492baa8384e700fac3732353763459c8dfa65fe549940092efca6c1f9ae999591615b7403c1c0630123eb49e3a23f17be3216bc7235825d451b7e512f61603e016db5f31c902c331fb65d10fec674543b78694d7e66ad021d48fdd26fc3ae3b"}, &(0x7f0000000240)=0xf6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000480)={0x73, "822f8bd45c3d83f2d87e4d203d7fe72ff019ea9debe06b0d7d9876d71e572c0f7a239bd1bb308bfe508187f1d34ae0f38027ce0cb9f18ac9c4b6cf255f9558839db58d9420e4d14f236e95b9669179b52ece94761545192f2866ac1048b859080fb3169132c441c0ad26e8bf25be4aefff04e7bbcb11703bb2d8db46aab81aba"}) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:23:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:53 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x670c0000) 10:23:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001c, 0x0) 10:23:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f000049a000/0x3000)=nil, 0x3000, 0x0, 0x33, r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r2, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="db06040016628b2fe3c59e03"], &(0x7f00000006c0)=0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000003c0)="201d8173cc7355d79550059f59aa44ef", 0x10) dup3(r2, r0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) rt_sigsuspend(&(0x7f0000000340)={0x6}, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce4dd3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) renameat2(r0, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00', 0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000400)={0xff, 0x40, 0x22, 0x7, [], [], [], 0xffffffff, 0x100000000, 0x6, 0x5, "504b581daa168ffd0c981589d62a0320"}) 10:23:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x101, &(0x7f0000000040)) r2 = socket$xdp(0x2c, 0x3, 0x0) dup2(r2, r0) 10:23:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xe80, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001d, 0x0) 10:23:53 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x99f3ffff) 10:23:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001e, 0x0) 10:23:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:53 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0xfffff399) 10:23:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) mbind(&(0x7f0000700000/0x1000)=nil, 0x1000, 0xc10a04075ea35c55, &(0x7f0000000100)=0x1, 0x8, 0x4) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @random="3df4ba7f9c7c", 'batadv0\x00'}}) 10:23:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000021, 0x0) 10:23:54 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2800, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000022, 0x0) 10:23:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x400000000000) 10:23:54 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/udmabuf\x00', 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x7, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$TIOCCBRK(r1, 0x5428) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mq_unlink(&(0x7f0000000640)='/dev/audio#\x00') write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x2b2, @empty, 0x8001}}, [0x4, 0x8, 0x8, 0x3, 0x80, 0x5, 0x1, 0x9, 0xfffffffffffffffc, 0x1, 0x6, 0x7ff, 0x80, 0xffff, 0x400]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r5, 0x7fff}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0xc, &(0x7f0000000180)='/dev/ashmem\x00'}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x7f, 0x0, 0x1, 0xf868, 0x0, 0x1, 0x180, 0x8, 0x0, 0xff, 0x3, 0x5, 0x2, 0x101, 0x1, 0x3, 0x8, 0x0, 0x5, 0x9, 0x6, 0x5, 0x9, 0x85b0, 0x7, 0x7fffffff, 0x3, 0x0, 0x2, 0xffffffffffff7fff, 0xffffffffffffff81, 0x8, 0x3, 0x3, 0xa41, 0x0, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0x80000000, 0x3, 0x8, 0x0, 0x7f5, 0x6}, r6, 0x0, r3, 0x8) io_setup(0x101, &(0x7f0000000040)) r7 = socket$xdp(0x2c, 0x3, 0x0) clone(0x80040000, &(0x7f00000004c0)="5e316c8a72c1c96577f9d835f84408b16ce765df3b7b3383cf76651260ea7c873153a304d11c07e8466d70cff3c9e6c0ae08f5b8854870e59b33571b621b1053bf8881c3f35686a71a2d95a07d", &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="97d234d32c8f6f586677209833d2f74ffb04c9a6d99ab23b32868d72e9fabf84c62570ddbf3b32297b5dfc211eae1c11e896f505b00a5ad07c220f170a6ff4e24406e7bfb6e1d7dbdfe856052df49d564f23bac7045eb2") dup2(r7, r0) 10:23:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380), 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[], &(0x7f00000006c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000100)={0x5c, @broadcast, 0x4e20, 0x2, 'wlc\x00', 0x28, 0x10001, 0x17}, 0x2c) r7 = dup2(r6, r0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000180)) 10:23:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x20000000000000) 10:23:54 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3580, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:54 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x0, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000023, 0x0) 10:23:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x100000000000000) 10:23:54 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3f00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000024, 0x0) 10:23:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x200000000000000) 10:23:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000025, 0x0) 10:23:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:55 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000060000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007113a85479528ba700060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x106b, &(0x7f0000000100)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:55 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x0, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:55 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1e00000000000000) 10:23:55 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000026, 0x0) 10:23:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:55 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4305, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000027, 0x0) 10:23:55 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x1f00000000000000) 10:23:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:55 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4788, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:55 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x670c000000000000) 10:23:55 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r2, 0x2}}, 0x18) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffff) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1500003950323030302e4c"], 0x15) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000000)='dummy0\x00'}) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:23:55 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x0, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000028, 0x0) 10:23:55 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4888, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:55 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x8000000000000000) 10:23:56 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000029, 0x0) 10:23:56 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0xfffffffffffffe6b) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x8001, 0x1ff, 0x4, 0x7], 0x4, 0x4, 0x40, 0x8000, 0xffffffff, 0x7, {0x200, 0x5, 0x0, 0x9, 0x7, 0x180, 0x2, 0x8001, 0x9, 0x8, 0x4, 0x7ff, 0x8, 0x5, "8406341319dc4d6cc394d8c38dfe314513607a3064f27153b0020dd13f0cd0e7"}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000100)=0xc) 10:23:56 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x99f3ffffffffffff) 10:23:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x800000000000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:56 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:56 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6488, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:56 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002a, 0x0) 10:23:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0xffffffff00000000) 10:23:56 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000006000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0xfffffffffffff399) 10:23:56 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002b, 0x0) 10:23:56 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800e, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:56 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3ffffffffffc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fbe30506ab3bbccec9b6e7ff38433ab976067e227c07dc35415ac3bdc75c7c2b06466faf824fc653e4b67f3e80cdc2bf3a93597f88cb6a4f3f15fd47ab5a03fe0d5d4cf7eb9c71dde45dda210b68e7d48b5638a651301cb5fb2475300701779798178866a81236613d6b56b6c200f5905fb318446e59e06f3f3d5d22a201b470c3ff5b7c8d121216b2b546de961beb04db42ed569f753f7ca61dc79178f65e03ea55e9d236373c221f7932ec3c5415c828c11b61e0622f9e274d860a875b99978b1a119616dde962c291429b5edaca4bb1dcd6edca48a83607755fbb0544300fbc5e"], 0xe3, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) dup2(r4, r1) 10:23:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) 10:23:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:23:56 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002c, 0x0) 10:23:56 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8035, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:56 executing program 5: init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)='/dev/cec#\x00') mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x22, 0x10, 0xffffffffffffffff, 0x0) 10:23:56 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8100, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:57 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8847, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:57 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002d, 0x0) 10:23:57 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, r0, 0x0) 10:23:57 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r2 = msgget$private(0x0, 0x100) msgrcv(r2, &(0x7f0000000380)={0x0, ""/196}, 0xcc, 0x1, 0x3000) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x39}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) io_setup(0x101, &(0x7f0000000040)) r4 = socket$xdp(0x2c, 0x3, 0x0) dup2(r4, r0) 10:23:57 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:57 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}, {&(0x7f0000000100)=""/163, 0xa3}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/122, 0x7a}], 0x4) 10:23:57 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8848, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:57 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002e, 0x0) 10:23:57 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:57 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8864, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:57 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8ceb0400ac0000480000ff7f3477cb261cccb23bd2645630338312e372f78e900383f868aebf054d69cb9c90c8d0caf55a934f93b178c43d9c3436cc7549337b11abdaa49ab6eca4e880fd3c88253709d6a8cc295d8a8ce6243d714dc32469fd65d3faa734ef20cca534264bbe3e6d1c6d697ae65e5e23d848b1bfd6104545871cd1400d5e6d53ea852ed5ef313591f2d1b421ca8c9eddbe95f28ea5e1327e129c280c08f4f21da396651aebbaa5594c99a33e3099ec4939dc6b0c4fbc677bc4e9dd4a2e73153af733dc457deefd880f66d6163de6f7b68a77bd881b61f0ca2088eaeab98d78ac59975ee259f682d3ded8be89c52a4a6d2a1d62c66a20"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000100)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:57 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002f, 0x0) 10:23:57 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast1}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@local, 0xa, r1}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10:23:57 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8906, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:57 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:58 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000100)="ac4421f69d2e8bd29112da318ddd3717bcc12b5aef8e59dd8876bcac4570ffba50b93f4076f4633a2940b74a152d744f783e806b20325e8ab89c3e9a1fcebaf42fcbf4bc13d318764f7a5f9db99e89ae53") setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000030, 0x0) 10:23:58 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) fremovexattr(r0, &(0x7f0000000080)=@random={'system.', 'hsr0\x00'}) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'hsr0\x00', 0x1a4}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000180)={@dev, @remote, 0x0}, &(0x7f0000000200)=0xfffffd8e) connect$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xffffffff, @remote, 0xffffffffffff0a52}}, 0x24) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000003240)={r2, 0x1, 0x6, @local}, 0x10) 10:23:58 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x40, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:23:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf0ffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000031, 0x0) 10:23:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:58 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:58 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x81, 0x9, "1ea3cfbf45cf074700785726c73948501db15a7ae5b49557cd735f1c356285862761eb99c7df07825e679bad3875ac166a4fd516af8e2747f84cbaf566b39e", 0x1}, 0x60) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @local}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) accept$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000700)={@empty, 0x0}, &(0x7f0000000740)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000780)={@initdev, 0x0}, &(0x7f00000007c0)=0x14) getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) getpeername$packet(r0, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b80)={0x0, @remote, @multicast2}, &(0x7f0000000bc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000d40)=0xe8) accept4$packet(r0, &(0x7f0000000d80)={0x11, 0x0, 0x0}, &(0x7f0000000dc0)=0x14, 0x800) accept$packet(r0, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001e40)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000001f40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001f80)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000002080)=0xe8) getpeername$packet(r0, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002100)=0x14) accept$packet(r0, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002280)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000002380)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000023c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000024c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', r10}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r10}) accept$packet(r0, &(0x7f0000003b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003bc0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003c00)={'veth1_to_bridge\x00', r3}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003c40)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003d80)={@rand_addr, @initdev, 0x0}, &(0x7f0000003dc0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000047c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004780)={&(0x7f0000000e80)=ANY=[@ANYBLOB='P\t\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fbdbdf25010000730d000100", @ANYRES32=r2, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000400000008000100", @ANYRES32=r3, @ANYBLOB="280102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f706554d4fbe2e66b9465726f756e740000000000d76df91de2ee8f3fd4410000000000000008000400400000004000010024000100717565caa6a3496400000000000000000000000000000000000000000000000008a6b8bfedbc914a2800040000000000080006000000000000000000", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400710600003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r6, @ANYBLOB="a801020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000080080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000180ffff38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000002000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="080007000000000008000100", @ANYRES32=r12, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000700000008000100", @ANYRES32=r13, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="e801020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400b10d00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="4000010024749611cec44ff6b300010071756575655f6964000000000000009c18f1dd32bdeb62f89a78e9bcdf500000000000000000000000000000", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="5402020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000008038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffffff7f08000600", @ANYRES32=r22, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="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", @ANYRES32=r24, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r25, @ANYBLOB="ec0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040081000000"], 0x950}}, 0x0) 10:23:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000032, 0x0) 10:23:58 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000240)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x614e) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0xc1, 0x0) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) fcntl$getown(r0, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:23:58 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x3ffc}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2ebc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xa8, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2bc22af6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x1) dup2(r6, r0) 10:23:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000033, 0x0) 10:23:58 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$SIOCAX25GETINFO(r1, 0x890c, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:23:58 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, r0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6800000029020000040000c002000000080000000000000000040000000000000007002e2f66696c65300002000000040000000000000000010000000000000207002e2f66696c65301003000000000000000000000000010000000000000007002e2f66696c6530727d7c1c4e6a7d38de84dc8690f0da15a41359c690392ad9b72fb8c3a325999a3568ee38235c9d1d543258492ff5516e7e03f14bdb10a61188a6e23e83bab0c35b6f86ecfb811aadc889420ec130537367be02a501217bdaafacdd6e8fdd8d058c3a7b0938ee8907c05eb565e7c5f30edae687ea61e057f2a53ed707400d6cfadd1ca4422b6fba5e003621ac4cf95cb2bf28cc1999110918d486de624143fe09f8a9a131486b63d7aa635fedf12bca03328ab7b237f02bf184d68a3aecbe2f8cd9c6b30defd92358520f41"], 0x68) 10:23:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000034, 0x0) 10:23:59 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000000100)={0x3}, 0x8) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000380)="1b1d2b508b686135339fe86def7449b6c34687422d28e84f8ca93aae403219c79e5e6e25f987c0d2d8e89eda402c2702b2b8c6c0ee52f13952e133d56ddf697dc7a4160d864f957c9ea216548c8581921787d856e8c80acd5a30fcefbdddab1fb4d27418a7cba679dac2670d6cb3ebb8f964316fecf195e80f19ff18ee3559de0385b146a6a073bbdc4784b30cc21bd784367c9c6a5d40e995b4603cd3cb5610deffdbec4cd62220841a064e75b73e69f88f4c43483fbfaffef9d15b5ec2b6614ad0142fcdbb604cec6997ff32ce11e882767638690e59b1673492f345b9736272b1630b", 0xe4}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:23:59 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:59 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:59 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x40400, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x20}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r1, 0x0, 0x5, [0x8, 0x8, 0x2, 0x80000001, 0x5]}, 0x12) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x7ff, 0xfffffffffffffff7, 0x4, 0x4, 0x7}, 0x14) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x5, 0x7, 0x2, 0x40, 0xffffffff, 0x80000001, 0x9d, 0x7fff, 0x101, 0x6, 0x1ff, 0x0, 0x80000000, 0xbcb1, 0x9, 0x8, 0x2, 0x80, 0x40000000000000, 0x6, 0x1592, 0x2, 0x0, 0x10001, 0x4, 0x3, 0x4, 0x0, 0x30000000000000, 0x3, 0x3, 0x7f]}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x800008032, 0xffffffffffffffff, 0xfffffffffffffffd) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x9, 0x80, 0x200, 0x10000, 0x5, 0x1, 0x6, 0xfff, r3}, 0x20) 10:23:59 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000035, 0x0) 10:23:59 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0004badeca7b080000ff7f"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:59 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x7000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:59 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000037, 0x0) 10:23:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x64, 0x2, {"958adf358e1ed1f20737cabb085f79d59df5064aaebae944a0c8bec05af17080aa8fb4d222cece0a8823c4227368e25e3e57688dc5332e76748b579a1c53bf40526dc03c91f6feab91ea9b66"}}, {0x0, "f02659c9fc27660ff022fa5dbea17d26cb4269d46f32b61f2898191105491f5b123d8e812892acbc93f2d54553c4f6d97bc7aac0c3976c267196ace7fc108268c879a9592ec7"}}, &(0x7f0000000100)=""/215, 0xac, 0xd7}, 0x20) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:23:59 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/45) write$binfmt_misc(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1f, 0x10000) dup2(r3, r0) 10:23:59 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:59 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000038, 0x0) 10:23:59 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8060000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:59 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(0x0, 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:23:59 executing program 5: timer_create(0x2, &(0x7f0000000080)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000000)="2b162f71c91f52de7bc3c29c8e2d95331fddf8fafb6a6ad7e1b6c0f52193445c2d05a8c50ac128f15cce125d03c3694b89a64047b339cfdc5f68b9acc819b06670a3d314827d75a61711d7a2de2823b3190920918ed6a52888d0f70da0e1c48dfa726f2645f33fe8d0c8049bb80db340c500e37c8f9b25f94084ee61196664", &(0x7f0000000100)="fec0671948011f7e662bcedb56f0b5c45a18e022dbe3bde50df2a61efaf57417968c121a63d50b451d8d543054bd13a2e4b06f0590d67edb97b3129106494c261ad8223221e6a97e4e2dc3af19d84ac292fe65403822f0de46207129b4e0b1cdb37b51d5debe5feb190d05c8ee06b0b774bf68ad4ba588da03d4414d88833fe4c665ab3cf369d8a5b9b37eff46749e65b9274508dfcbe03cb42ea184e9269d4b5bcc2d716d1c5a2df0689c7157fe139bb6fbba3787cd98ceaa009aa10edc76252179c641558c515a424d60e38f8f8a21d288a0c8"}}, &(0x7f0000000200)) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x2, 0x4) 10:23:59 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000060000000000000009000000000000000000000000000000000000006d0000000000000000000000000000000000000000000000000000000300000000000000060100000000da4f00000000000000000000000000000000000000000000000000000000000000000000000000000000"]) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:23:59 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:23:59 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:23:59 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000039, 0x0) 10:24:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000003a, 0x0) 10:24:00 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:00 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x4, 0x0, [{0x9, 0x7, 0x0, 0x0, @sint={0x7f, 0x5d}}, {0x3f, 0x3, 0x0, 0x0, @msi={0x5, 0x3, 0x7}}, {0xb1, 0x7, 0x0, 0x0, @msi={0x3ff, 0x3, 0xffffffffffffffa9}}, {0x9, 0x3, 0x0, 0x0, @adapter={0x3, 0x5500000000000, 0x0, 0x8, 0x6}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:24:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000003b, 0x0) 10:24:00 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x14000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:00 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(0x0, 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:00 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x103) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'ifb0\x00', 0x2}, 0x18) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000003c, 0x0) 10:24:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0xffffffff, 0x80) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20000, 0x0) syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000600)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000180)=0x2, 0x4) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000007000000000000000000000000000000000000000000000000000023010000000000000000000000000000000000000000000000000010000000000000000000000000000006000000000000000900000000000000000000000000107d9df831ead7748e67b4f1000000000000000000000000000000000000000000000000000000000000000000000200000000000000060000000010b82aaad0929273ca4a4d3b70f72800006800000000000000000000000000000000001084c70e4bed0663eac9710242748e96b1000000000000000000000000000000000000000000000084058e8b8753090518bc40dcdc840b119021bf5210a3160325d5406fbd78e4b542879bafa2594570c5acba32b9db410b89b5b8894310fbeed1d0b3bae9f802b81d8b92e7060a681fe045e468396adf2732818e0842a03c5cfa7839cdb55fe2df62023133f2adfd262a594d8d97f23a0bde35b1f7e4c20d9acc5183436bfb23b8bbbb5318b8624d7beda6b2"]) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000000)={0x9, 0x8, [0xffffffffffffffe1, 0x5]}) dup2(r5, r0) 10:24:00 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x20000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:00 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000200)=""/235) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x1f, 0xd8}}, 0x28) 10:24:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000003d, 0x0) 10:24:00 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x28000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:00 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_netfilter(r2, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000002400)={0x106c, 0xb, 0xf, 0x18, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x4}, [@generic="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", @generic="b90ef7a310d8245a7d440f69c3064ea6e5b355184cad47a089247eec86ca64b41ed57fd585ff339bb22862b86b9144c043e20d3a97c893a43e2da1ffe02de949794fdd2a26d81c72c324a6b0dfc29bed8566b2b979f312f2"]}, 0x106c}, 0x1, 0x0, 0x0, 0x800}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b3a9137d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841d755727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c7314601002cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:00 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = semget(0x1, 0x7, 0x10) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000080)=""/17) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xbf12, 0x2, 0xffffffff, 0x48, 0x7f}) 10:24:00 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3f000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000003e, 0x0) 10:24:00 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(0x0, 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000180)=0x78) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7, 0x3f, 0x401, 0x8}, {0x2, 0x1, 0x5, 0x8}, {0x3, 0x5, 0x7f, 0x4}, {0x0, 0xe2, 0x200, 0x5}]}) ioctl$RTC_PIE_OFF(r2, 0x7006) dup2(r4, r0) 10:24:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x40000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000041, 0x0) 10:24:01 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x1000, 0x3000000000000, 0xfff, 0xe8b1]}, &(0x7f0000000280)=0xc) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x82000, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x100010, r2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x24}, 0x7}, 0x1c) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r3, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}}, &(0x7f00000001c0)=0x18) 10:24:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x43050000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:01 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0x8, "6bca267a45e5ac07b9771632e48862b9f0bf16ef59d69271d9daa163587cd3b9", 0x3, 0x40, 0x7, 0x4000, 0x6}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0xa, 0xf, 0x7fff) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x6000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:24:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000042, 0x0) 10:24:01 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xfc, 0x8012040) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x9f, 0x5, 0x6, "ca8771b0b0737f4e534a8dfcf36e57c6", "c5936b6d9efda6a50d61a0431bb8e60cb8b52c1ad2c6d7632a4b3cf1ef8efb64d7855ca2dfb12362ea6829526de094d8805cb7359853e2023f3ea8c05248e248364f1cdaecf3f7a9ef01a2ed6f6569d318f5be6f364d6e24b9f9e9c237de1d7a0a676a05fa4c44c2ee1f3482f50d01473c9009484ec78625347d7e4dcd4f0c43fe25a809eb13e4bdc92e"}, 0x9f, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000100)=0x1) dup2(r6, r0) 10:24:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x60000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:01 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, r0, 0xfffffffffffffffe) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x9, 0x8, 0x7fff}) socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) 10:24:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000043, 0x0) 10:24:01 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:01 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:24:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800e0000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:01 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) recvfrom$packet(r0, &(0x7f0000000000)=""/144, 0x90, 0x12160, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x3f01f, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001500)={'broute\x00', 0x0, 0x4, 0xda, [], 0x4, &(0x7f00000013c0)=[{}, {}, {}, {}], &(0x7f0000001400)=""/218}, &(0x7f0000001580)=0x78) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000140)=0x4) r1 = mq_open(&(0x7f00000002c0)='/dev/cec#\x00', 0x800, 0x20, &(0x7f0000001380)={0x81, 0x7, 0x401, 0x1, 0x6, 0x1, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x2f, 0x0, &(0x7f00000001c0)="a5f50dd950b887b621d0effeb3a100669fd6ad8fc31618f6293cdfeed7711b35b4250cc132f3d4c7e1c1e23d238c58"}) r2 = fcntl$getown(r1, 0x9) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001680)={'filter\x00', 0x0, 0x3, 0x7e, [], 0x4, &(0x7f00000015c0)=[{}, {}, {}, {}], &(0x7f0000001600)=""/126}, &(0x7f0000001700)=0x78) recvmsg$kcm(r0, &(0x7f0000001340)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000002c0)}], 0x2, &(0x7f0000000340)=""/4096, 0x1000}, 0x2001) sched_getattr(r2, &(0x7f0000000100), 0x30, 0x0) 10:24:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000044, 0x0) 10:24:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x80350000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:01 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) 10:24:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x81000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000045, 0x0) 10:24:02 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r1, &(0x7f0000000040)=""/125}) 10:24:02 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x86ddffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:02 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r0, &(0x7f00000001c0)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0xa22}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000180)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) dup2(0xffffffffffffffff, r0) 10:24:02 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000046, 0x0) 10:24:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$SIOCAX25GETINFO(r1, 0x890c, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:24:02 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88470000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:02 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x88000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000100)=""/105) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000001180)=0x80000000, &(0x7f00000011c0)=0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000180)=""/4096) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) 10:24:02 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88480000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000047, 0x0) 10:24:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$SIOCAX25GETINFO(r1, 0x890c, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:24:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000048, 0x0) 10:24:02 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:02 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88640000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:03 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0004000000000800007b46"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c7676e245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:03 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x3}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:03 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88a8ffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000049, 0x0) 10:24:03 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$SIOCAX25GETINFO(r1, 0x890c, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:24:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000004a, 0x0) 10:24:03 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:03 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88caffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:03 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:03 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) clock_gettime(0x5, &(0x7f0000000280)={0x0, 0x0}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1ff, 0x100000001, 0x80000000, 0x1, @time={0x77359400}, {0x7f, 0x1}, {0x2ea471c}, @time=@time={r1, r2+10000000}}, {0x6, 0xffffffffffffffff, 0x4, 0x1ff, @time, {0x80, 0x3f}, {0x0, 0x101}, @time=@time}, {0xfc, 0xbf8, 0x3, 0x3, @tick=0x4, {0x4, 0x3}, {0x2, 0x2}, @ext={0xba, &(0x7f0000000100)="3855b32d2d0435dbd9b8a8e6caba3029065f0ad7c67834c9f89c54399eb4f1e865a05b92e36dbc8a5bc80c3dbd99d3e62fd088a9e10fa0d6ebab86b735a5d902f6ab8b8e3b66b8b508b6bd2d5baada4e695cd26c7bf3fbc4a91f1c899fc73d6cc71015d4627fa33239479161150fec5d2cce4776c68cc335d250a79ff62bdbd4c4e52e9c3014d51726475ea550ae4bb4944c8283abd2914b51252c8ec7ea44e9d590c29a168de86e1feb1369a5cf1b16e37735eee4f13c4329c4"}}, {0x401, 0x7, 0xff, 0x1a1d, @time={0x0, 0x989680}, {0x1}, {0x92c, 0xfff}, @queue={0xfffffffffffffe00, {0x8, 0x35932756}}}], 0xc0) dup2(r0, r0) 10:24:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000004b, 0x0) 10:24:03 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x89060000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r1, 0x800, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r3, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f170410000000080000ff7f"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) write$binfmt_misc(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r2) 10:24:03 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000004c, 0x0) 10:24:03 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfdffffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:03 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) personality(0x400000d) 10:24:03 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfeffffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000004d, 0x0) 10:24:03 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:03 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0xfffffffffffffe6b) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r1, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) dup2(r3, r0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x8001, 0x1ff, 0x4, 0x7], 0x4, 0x4, 0x40, 0x8000, 0xffffffff, 0x7, {0x200, 0x5, 0x0, 0x9, 0x7, 0x180, 0x2, 0x8001, 0x9, 0x8, 0x4, 0x7ff, 0x8, 0x5, "8406341319dc4d6cc394d8c38dfe314513607a3064f27153b0020dd13f0cd0e7"}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000100)=0xc) 10:24:04 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000004e, 0x0) 10:24:04 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffa888, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:04 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) sched_getparam(r1, &(0x7f0000000240)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x583) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000002c0)={0x0, 0x7, 0x5b239400, [], &(0x7f0000000280)=0x4}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x617, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x29}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8800) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:04 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write$capi20_data(r2, &(0x7f00000003c0)={{0x10, 0xffffffffffffff80, 0x84, 0x82, 0x7ff, 0x46f8}, 0x87, "ba7433f0ac5cbc427b45d6c08ae38bc4823e5cad86f56eda68a8621994e9d7a9d2724672abffe2336ba3cfe1c9fd5944bb14759d285a734acfaf3a554acf76f34e400269c45a81b96c408eb234c77caa1f1f942342df5a32e24ad1ba63a6d45a1b6542b55c3bad8ecc060a72108b5f680b07a933fd5b4404afe68c29fe682b7cc98fdf3d2d01cd"}, 0x99) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:04 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000004f, 0x0) 10:24:04 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffca88, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:04 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/udmabuf\x00', 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x7, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000060000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f22adfbeb3f7b6d430868ff8c73a5684e3eb54324e1326706b5e82b76da5f0d923c34801d8db6259eeff35fc967a3cb3d462f8b62dd128018bf8c806e75f2bcdcd19f69e54d32062814e40c135ac2178cb3e3bab91ae54e37030000000000000000000000"]) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$TIOCCBRK(r1, 0x5428) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mq_unlink(&(0x7f0000000640)='/dev/audio#\x00') write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x2b2, @empty, 0x8001}}, [0x4, 0x8, 0x8, 0x3, 0x80, 0x5, 0x1, 0x9, 0xfffffffffffffffc, 0x1, 0x6, 0x7ff, 0x80, 0xffff, 0x400]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r5, 0x7fff}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0xc, &(0x7f0000000180)='/dev/ashmem\x00'}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x7f, 0x0, 0x1, 0xf868, 0x0, 0x1, 0x180, 0x8, 0x0, 0xff, 0x3, 0x5, 0x2, 0x101, 0x1, 0x3, 0x8, 0x0, 0x5, 0x9, 0x6, 0x5, 0x9, 0x85b0, 0x7, 0x7fffffff, 0x3, 0x0, 0x2, 0xffffffffffff7fff, 0xffffffffffffff81, 0x8, 0x3, 0x3, 0xa41, 0x0, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0x80000000, 0x3, 0x8, 0x0, 0x7f5, 0x6}, r6, 0x0, r3, 0x8) io_setup(0x101, &(0x7f0000000040)) r7 = socket$xdp(0x2c, 0x3, 0x0) clone(0x80040000, &(0x7f00000004c0)="5e316c8a72c1c96577f9d835f84408b16ce765df3b7b3383cf76651260ea7c873153a304d11c07e8466d70cff3c9e6c0ae08f5b8854870e59b33571b621b1053bf8881c3f35686a71a2d95a07d", &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="97d234d32c8f6f586677209833d2f74ffb04c9a6d99ab23b32868d72e9fabf84c62570ddbf3b32297b5dfc211eae1c11e896f505b00a5ad07c220f170a6ff4e24406e7bfb6e1d7dbdfe856052df49d564f23bac7045eb2") dup2(r7, r0) 10:24:04 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000050, 0x0) 10:24:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x284400, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x40000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x9032, r1, 0x0) name_to_handle_at(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x83, 0x6, "e42622337583b366540909bc9acb7ae1452ac35622fabcdff09ac8c4d1bbd4b4415a94aa0647097a99151692feb5a990269191972a87ad547178b22040c0ad46fc5d020836cb6996e507bfe0c3cfd05ea52d8bbc833305fbab4fbf77cbdaa951cf945f87a2786bc025dc412418f6d91d76bd3a2f382d51a4846c19"}, &(0x7f0000000400), 0x1000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) wait4(r2, &(0x7f0000000200), 0x1, &(0x7f0000000240)) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0x82000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x44000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x483]}, &(0x7f0000000080)=0x6) 10:24:04 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffdd86, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:04 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:04 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffff000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:04 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) restart_syscall() r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000580)=0x2) add_key(0x0, &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="2f8903ec9380dc56772cd5565ff19984458aeca1a66bc3538a7f757f24a3212f75cc4f8bd642dde362d7522ea6dedbfdaa7364f18e5e079c22542d59ef703ae5e78eae1d9702cf82bd5f316e30778fe63e696ab5fc3e18b5b965455f3c64816e40e12aeb", 0x64, 0xfffffffffffffffc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000010d, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = getpid() capset(&(0x7f0000000500)={0x399f1736, r4}, &(0x7f0000000540)={0x1, 0x10001, 0x0, 0x4a16, 0xa, 0xa06}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x3b0, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffffffff26d, @dev={0xfe, 0x80, [], 0x23}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x3f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x7fffffff}}}}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x20}, 0x7ff}}}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a55abb9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x120, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe24}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc28}]}]}]}, 0x3b0}}, 0x20000004) 10:24:04 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000051, 0x0) 10:24:05 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:05 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:05 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000052, 0x0) 10:24:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/udmabuf\x00', 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x7, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) write$vnet(r2, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$TIOCCBRK(r1, 0x5428) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mq_unlink(&(0x7f0000000640)='/dev/audio#\x00') write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x2b2, @empty, 0x8001}}, [0x4, 0x8, 0x8, 0x3, 0x80, 0x5, 0x1, 0x9, 0xfffffffffffffffc, 0x1, 0x6, 0x7ff, 0x80, 0xffff, 0x400]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r5, 0x7fff}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0xc, &(0x7f0000000180)='/dev/ashmem\x00'}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x7f, 0x0, 0x1, 0xf868, 0x0, 0x1, 0x180, 0x8, 0x0, 0xff, 0x3, 0x5, 0x2, 0x101, 0x1, 0x3, 0x8, 0x0, 0x5, 0x9, 0x6, 0x5, 0x9, 0x85b0, 0x7, 0x7fffffff, 0x3, 0x0, 0x2, 0xffffffffffff7fff, 0xffffffffffffff81, 0x8, 0x3, 0x3, 0xa41, 0x0, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0x80000000, 0x3, 0x8, 0x0, 0x7f5, 0x6}, r6, 0x0, r3, 0x8) io_setup(0x101, &(0x7f0000000040)) r7 = socket$xdp(0x2c, 0x3, 0x0) clone(0x80040000, &(0x7f00000004c0)="5e316c8a72c1c96577f9d835f84408b16ce765df3b7b3383cf76651260ea7c873153a304d11c07e8466d70cff3c9e6c0ae08f5b8854870e59b33571b621b1053bf8881c3f35686a71a2d95a07d", &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="97d234d32c8f6f586677209833d2f74ffb04c9a6d99ab23b32868d72e9fabf84c62570ddbf3b32297b5dfc211eae1c11e896f505b00a5ad07c220f170a6ff4e24406e7bfb6e1d7dbdfe856052df49d564f23bac7045eb2") dup2(r7, r0) 10:24:05 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000400)=""/118, 0xfffffffffffffd0a}, {&(0x7f0000000480)=""/112}], 0x10000000000000dc, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000400000000080040647f"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2c8400, 0x0) fcntl$addseals(r2, 0x409, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendfile(r0, r3, &(0x7f0000000180), 0x101) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mq_getsetattr(r2, &(0x7f0000000300)={0x4, 0x10001, 0x7, 0x7fffffff, 0x1000, 0xbed802, 0xfffffffffffffeff}, &(0x7f0000000340)) io_submit(r6, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0xffffffffffffffff, 0x0, r4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:05 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000053, 0x0) 10:24:05 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf0ffffffffffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:06 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x100000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:06 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 10:24:06 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000054, 0x0) 10:24:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x10) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:06 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x200000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:06 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a40)={0x0, 0x1000, "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"}, &(0x7f0000000200)=0x1008) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380)={r2, 0xee, "b2b25364be8143428acaa059c143f06c8c59d7a9487e1c54c02f8980cab2375170322e9c2ddd940f4d3b1b419e40b7880b62b23a502b3720298f2721da5164b008bdff878144bcfd8321614d0781733a50a3ba5486a196da3d6800cd4a256384c6d9f897e2ec2110656f04ef79ec5605a5bd64bdf8104d346280fa73adaeac558e407e0e83bc09d21b906d5dc4d33492baa8384e700fac3732353763459c8dfa65fe549940092efca6c1f9ae999591615b7403c1c0630123eb49e3a23f17be3216bc7235825d451b7e512f61603e016db5f31c902c331fb65d10fec674543b78694d7e66ad021d48fdd26fc3ae3b"}, &(0x7f0000000240)=0xf6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x6}]}) write$vnet(r3, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x68) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000480)={0x73, "822f8bd45c3d83f2d87e4d203d7fe72ff019ea9debe06b0d7d9876d71e572c0f7a239bd1bb308bfe508187f1d34ae0f38027ce0cb9f18ac9c4b6cf255f9558839db58d9420e4d14f236e95b9669179b52ece94761545192f2866ac1048b859080fb3169132c441c0ad26e8bf25be4aefff04e7bbcb11703bb2d8db46aab81aba"}) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:24:06 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000055, 0x0) 10:24:06 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x300000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:06 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:06 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000056, 0x0) 10:24:06 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, r0, 0x0) 10:24:07 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x600000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:07 executing program 0: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:07 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x18c4}, 0x8) 10:24:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000057, 0x0) 10:24:07 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000180)={r2, 0x2}, 0x8) dup2(r7, r0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x4400) 10:24:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000058, 0x0) 10:24:07 executing program 0: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:07 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x700000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:07 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000180)='proc\x00', 0xffffffffffffffff}, 0x30) prlimit64(r1, 0xe, 0x0, &(0x7f0000000200)) connect$netrom(r0, &(0x7f0000000100)={{0x3, @default, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="f09485a700", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x613a0300, 0x1ca6}, 0x3c1) 10:24:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000059, 0x0) 10:24:07 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:07 executing program 0: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005a, 0x0) 10:24:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:07 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180)={0x1, 0x0, 0x1aa, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000400000003080000ff7f"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000100)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:07 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x806000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:07 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/100, 0x64) 10:24:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005b, 0x0) 10:24:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:08 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 10:24:08 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 10:24:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005c, 0x0) 10:24:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:08 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="7b914635b6359d31e077e15adf7128ec252b5c3f5b3c27fd6f71a882096dc06c089d530b5f5d75dfa1749a4f75b8d3bbc811449791bbf47e8b7ba56111f727a7ad9d6465c92ac3dcbcdd90d6cecc7c2fcdde8af9d3eafa67cbc00fa71b902c02112ff30c7f9cd8f7559a2719bf8e0dc7798639396ff3ef2b38fe899685246cfbbfc22116f2eac83062b306a44c43e3dd53df9878e362436b8c2816d66220684eba1ae644a71dfb3677f1f26dbbe57fa8817996f04a02a8ca76ce03d14ce891033b2a1adb05cf712f43324e747159b456588c11c39ea5e21844b8792f13d760d98bcf6eecc68188f830a0c9"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000180)=0xffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x6, 0x7fff, 0x9, 0x1, 0x0, 0xfff, 0x80, 0x0, 0x3e46f42b, 0xfffffffffffffff9, 0x0, 0x100000001, 0x10000, 0x3, 0x1, 0xf7, 0x7f, 0xffffffffffff9425, 0x9, 0x7fff, 0x8, 0x2000, 0x1, 0x4f0d, 0x10001, 0x8, 0x7, 0x7fffffff, 0x1, 0x7, 0x7, 0x72, 0xf932, 0x6, 0x4, 0x1ff, 0x0, 0xb39, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x3, 0x200, 0xf, 0x3, 0x7, 0x7f}, r5, 0x9, r2, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x6861, &(0x7f0000000340)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x53862a2, r3}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:08 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 10:24:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005d, 0x0) 10:24:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:08 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x0) 10:24:08 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005e, 0x0) 10:24:08 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) lsetxattr$security_evm(&(0x7f0000000640)='./file0\x00', &(0x7f00000008c0)='security.evm\x00', &(0x7f0000000a00)=@v1={0x2, "7f"}, 0x2, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) sendmsg$nfc_llcp(r1, &(0x7f0000000180)={&(0x7f0000000300)={0x27, 0x1, 0x1, 0x0, 0x4, 0x3, "070715d57332056b2bd57db1e9d2a349d3218d043760aca45f2ae2cf0eb0ae5382d6e525270791e0e557c6e47ef1c3b18068bacf7299d9effdc6daf12679ed", 0x35}, 0x60, &(0x7f0000000780)=[{&(0x7f00000003c0)="6bd133088e1fe5b264ab22da5d2748ca1cef1ce9962cb578c32c0d9a1230c48e1644f88c965effaae06cd754348efdd98ebb99fe90e754f7cfd63116ce7c00ba6f24a1e198c7a8dfd23d5d4969c88ab9f91cfa01e1567474627e6a3337ce0cc2f301425b853f22af310f90889c90ffba0f28f361e49d3ca6a2f0", 0x7a}, {&(0x7f0000000440)="791b64345c64592e787c2ef87f08f8ab4cc49122943e5db818d92e18cb17f9dbf9170326ce23b36e7eb1711a63be29753c61653f5a84274f685bddb7d3c66f94617c13dcff414b1ce956fb16132b665340ab0074e508ced701f0be49a942df9ec92b474ca4f4a75985144c0c82c6e671123c3fb1243ec0c3a2f4f3ed5d29809cad", 0x81}, {&(0x7f0000000100)="164b1f4f7028416b0d4406a5bcbf40cb83f178d3e52e37062f307c086c6101fc7c1c6e55d5ac51", 0x27}, {&(0x7f0000000500)="188610c37153897f3c83eb453b7e6d547b2539bf12fbc76843cefd8231ccdb925a507fbd0e11bcd430f07c5fd8d3dfbcf99860fa7f6e17f1170e3e8a747febb7a4a22bbd38fbf18ad8e0aaab1d6ff331a77a86592f1cc32f97ad28801afa8288f8f3e4bc87f15d723abb4fe0cbe913654c9fc947fb081486ac189d9781af92620743dda1e279f4d2f5005710b5ad457e9a2f44ae90a871a8f899a81d", 0x9c}, {&(0x7f00000005c0)="e48a0d394394589579715ef4493086e682172cd5c8a33115af69379fe4cd5fd9c09cec955e3822f6e336f4f4b0bc429f9cfd37bbd4009fe75f48a6dc06abbb769899a1a2", 0x44}, {&(0x7f0000000700)="2f1d60f5c3a22ead97e2c1b88f8f638a9ea47f7d0a46dbdc6659134b171d10557f5302937cdc3d31ace163fd05028623d4f13a0cf6841f2a7b342f6c4cb3adb96e8fcb92007d15354994ece7effa29e045c4624fd62fc383f5b91921e02a176f8b008743c4", 0x65}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="90000000000000000d010000810000002036e0558c8946740b000000000000c1bf7e02204ff12c985775f49f2cab923e0b02642eb308475cce152a824117031568038d12faff1ac699d650a095e3bc505834230741c53ecd1a2a2efebdb99bd28d95d54fc0a2b6546603299e78f1bceea7e9db2341af8fde2e63f166eb377072678110cefd9876d39b95049984070000"], 0x90, 0x40000}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000a40)=0x2) dup2(r6, r0) 10:24:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:08 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x0) 10:24:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x80000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) write$binfmt_script(r2, 0x0, 0xeffd) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x100, 0x4e24, 0x4, 'wrr\x00', 0x7, 0x101, 0x36}, 0x2c) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f00000001c0)=""/42, 0x2a, 0x47) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000005f, 0x0) 10:24:08 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x0) 10:24:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2800000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000060, 0x0) 10:24:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3f00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:09 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x280) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000180)={0xff, 0x2, 0x7, 0x2}) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:09 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x100000) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/ip6_tables_names\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x7a8, 0x0, 0x0, 0x380, 0x4b8, 0x4b8, 0x6d8, 0x6d8, 0x6d8, 0x6d8, 0x6d8, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0x338, 0x380, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x7fffffff, 0x0, 0x7, 0xfff, 0x30, 0x5, [@local, @rand_addr="408a2ef006ac8f101ea94d7f18ba241b", @empty, @remote, @ipv4={[], [], @loopback}, @mcast1, @dev={0xfe, 0x80, [], 0x25}, @ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @remote, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @dev={0xfe, 0x80, [], 0x28}, @initdev={0xfe, 0x88, [], 0x0, 0x0}], 0x1}}, @common=@rt={0x138, 'rt\x00', 0x0, {0xc1, 0x8e, 0xfffffffffffffe00, 0xffffffffffffff7f, 0x36, 0x3, [@mcast1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @dev={0xfe, 0x80, [], 0xd}, @local, @mcast1, @mcast1, @empty, @local, @dev={0xfe, 0x80, [], 0x21}, @remote, @local, @empty, @loopback], 0x4}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv6=@dev={0xfe, 0x80, [], 0x13}, @ipv6=@remote, @icmp_id=0x67, @icmp_id=0x67}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x16}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'ifb0\x00', 'lo\x00', {0xff}, {0xff}, 0x3a, 0x23a9, 0x0, 0x7}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@socket1={0x28, 'socket\x00', 0x1, 0x1}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x67, @icmp_id=0x65}}}, {{@ipv6={@empty, @mcast1, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xff], 'yam0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x87, 0x6, 0x5, 0x22}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@ipv4={[], [], @multicast2}, @ipv4=@empty, @port=0x4e24, @port=0x4e20}}}, {{@ipv6={@ipv4={[], [], @broadcast}, @local, [0xffffffff, 0xff, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'team_slave_0\x00', 'hsr0\x00', {0xff}, {}, 0xff, 0x5, 0x0, 0x10}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@rand_addr=0x666775b8, @icmp_id=0x64, @port=0x4e20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x808) 10:24:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x240401, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000400000000080000ff7f3203b0e880c32e88613c0293c441f42f10aaf158081a24a68e0191e5b7bf69c494889c876d943103e0407635f6e548a1835e1b81e8337fb516ef49422baf484bbfb08fd564f7aaf6caa70d5415dc7ef7abec6f00be1d8b0519917e8ffa7e167936e61379da3aabaac55b13109e9bf855e829c985031ca756ceb3f002640cf2673eb20fd20418d92f937b45a0c4f02b0bcb07c119f8fba41c663b276a45ba328e3ab0806098801ca038640c885cf6ca0e4a3ae49b0aa93b91e3aca5e816ed9d733c7b860ae16484a2dee9ef80053c08c9380aba6451523ba28f5ae99c4cc7bed9a39337a6e78e8cd2392d4729b9a0a312dd1ffce14e909b464f2f0d2eba52a244cb3e1e8c903b176836bf706ed9d15ce4f5ade31304b725c0f74cde62d55928197c58905ee95ddca11e6b8194d17d68058f058ecb11"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) fadvise64(r0, 0x0, 0x100000000, 0x3) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'veth0_to_bond\x00', 0x1}, 0x18) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000061, 0x0) 10:24:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4305000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:09 executing program 0 (fault-call:0 fault-nth:0): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000062, 0x0) 10:24:09 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x3, 0x8}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x3, 0x1, 0x40, 0x3}) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 639.499929][ T7584] FAULT_INJECTION: forcing a failure. [ 639.499929][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 639.578810][ T7584] CPU: 1 PID: 7584 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 639.588077][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.598155][ T7584] Call Trace: [ 639.601573][ T7584] dump_stack+0x172/0x1f0 [ 639.605942][ T7584] should_fail.cold+0xa/0x15 [ 639.610657][ T7584] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 639.616494][ T7584] ? ___might_sleep+0x163/0x280 [ 639.621372][ T7584] __should_failslab+0x121/0x190 10:24:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) [ 639.626355][ T7584] should_failslab+0x9/0x14 [ 639.631059][ T7584] kmem_cache_alloc+0x2b2/0x6f0 [ 639.636858][ T7584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.643210][ T7584] vm_area_dup+0x21/0x170 [ 639.647563][ T7584] __split_vma+0xad/0x570 [ 639.651916][ T7584] ? find_vma+0x30/0x170 [ 639.656181][ T7584] __do_munmap+0x2ef/0xef0 [ 639.660944][ T7584] mmap_region+0x227/0x1770 [ 639.665480][ T7584] ? __x64_sys_brk+0x760/0x760 [ 639.670312][ T7584] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 639.676584][ T7584] ? get_unmapped_area+0x295/0x3b0 [ 639.682062][ T7584] do_mmap+0x8e2/0x1080 [ 639.686314][ T7584] vm_mmap_pgoff+0x1c5/0x230 [ 639.690943][ T7584] ? vma_is_stack_for_current+0xd0/0xd0 [ 639.696782][ T7584] ? wait_for_completion+0x440/0x440 [ 639.702206][ T7584] ksys_mmap_pgoff+0xf7/0x630 [ 639.702227][ T7584] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 639.702244][ T7584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 639.702299][ T7584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 639.702315][ T7584] ? do_syscall_64+0x26/0x610 [ 639.702332][ T7584] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.702353][ T7584] __x64_sys_mmap+0xe9/0x1b0 [ 639.712687][ T7584] do_syscall_64+0x103/0x610 [ 639.712708][ T7584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.712720][ T7584] RIP: 0033:0x458209 [ 639.712734][ T7584] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:24:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000063, 0x0) 10:24:10 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r2, 0x4, 0x1000}, 0x0, &(0x7f00000003c0)="54b1e3f2a979ec03731627201917139198559354661accc9cfca326fceb1072051deb9c62754a6e2655790b27da58e56a657ca0f1c05b6a3cbc0ac01b453d52bd57ff2531c72b73f318c607db4ea63d39e3de0503727bfb7c50aeb36c20603830d516e31622f5d9508a9b85a3c4ba12b27ce43e8bb2a78062d851caed061982bc87e3a3e6b583d534dd1ced4a96a20df08e244a435370d4881cd9316349b22ed3fbc0c15dc5791ca5d7603133ce303", &(0x7f0000002400)="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") dup2(r7, r0) [ 639.712742][ T7584] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 639.712756][ T7584] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 [ 639.712764][ T7584] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 [ 639.712773][ T7584] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 639.712782][ T7584] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 [ 639.712797][ T7584] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 10:24:10 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ptrace$peekuser(0x3, r1, 0x8) 10:24:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800e000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000064, 0x0) 10:24:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000065, 0x0) 10:24:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8035000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:10 executing program 0 (fault-call:0 fault-nth:1): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:10 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x181100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000300)={0x7ffffffe, 0x200404, 0xffffffff, 0x80000002}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r2, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000c40)={&(0x7f0000000780)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/174, 0xae}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/214, 0xd6}], 0x3, &(0x7f0000000bc0)=""/111, 0x6f}, 0x2) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000c80)={r8, 0x3, 0x7, 0x200, 0x4, 0x0, 0xffffffff}) dup2(r7, r0) 10:24:10 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r1, 0x80000, r0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000066, 0x0) 10:24:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8100000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:10 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x6801, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x8, 0x4, 0x3f, 0x3, 0x0, 0x29, 0x7fff, {0x0, @in={{0x2, 0x4e22}}, 0xc9, 0x8, 0x8c, 0x80, 0x2}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2500000066f994060fa0f7d04b684c164b1fcec151c5e4b0c8e6a5b266bad8f99cebfae3bf272aa95c0aa0a1a79f89f94ec34c2eeef5970a5265883203086fe4f9834a4f7a6f94388c4f53b7952e9f351442a42afaf656a922ac316b292ee84d2631b0c1031c0f8fb33eaa700744b5ae8cc02ca1cecfbf204cee97e9595d5c"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xb63e, 0x0, 0x8005, 0x53, 0x8000, 0x8, 0x800, 0x43b, r2}, &(0x7f0000000240)=0x20) r3 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x3, 0x2) r4 = fcntl$getown(r0, 0x9) write$P9_RGETLOCK(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1f00000037010002ef000000000000000000010000000000", @ANYRES32=r4, @ANYBLOB="01002137f0a7c0f2265f6db57b9232e5d6860511ab10e3f956098756ada051f0938fbc92b586ad84f4ccc6130a825101ec6f2a194ced0cd893ba860d74353e4b7628e8f69965578fe4b3c9cf4ed994bd7258a867ec9f70149f6e0bd8aa8e3277ae1ec8f0c98d2fb4477d00d75f867cf4db36793660024614c97d744fe88c05bec379c0bf829477d6e043d76f481f13eb7284e1c158a2a5a30e62f56324653027a0eb21c4e5e1f3badbd5f1a2ec5d8d120cd36efa30732f72117c54528919e35170e7f956b53700"], 0x1f) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000000)={0x9, &(0x7f0000000140)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r6, 0x3}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000004c0)={0x4, 0xfff, 0x0, 'queue1\x00', 0x570b}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000300)={0x7}, 0x1) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000f00)=""/4096}) 10:24:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000067, 0x0) 10:24:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x86ddffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:10 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x10000, 0x120000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) r8 = fcntl$getown(r3, 0x9) sched_getscheduler(r8) 10:24:11 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000068, 0x0) 10:24:11 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 640.928594][ T8108] FAULT_INJECTION: forcing a failure. [ 640.928594][ T8108] name failslab, interval 1, probability 0, space 0, times 0 [ 640.941759][ T8108] CPU: 1 PID: 8108 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 640.951074][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.961417][ T8108] Call Trace: [ 640.964740][ T8108] dump_stack+0x172/0x1f0 [ 640.969136][ T8108] should_fail.cold+0xa/0x15 [ 640.974038][ T8108] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 640.979882][ T8108] ? ___might_sleep+0x163/0x280 [ 640.984778][ T8108] __should_failslab+0x121/0x190 [ 640.989740][ T8108] should_failslab+0x9/0x14 [ 640.994310][ T8108] kmem_cache_alloc+0x2b2/0x6f0 [ 640.999198][ T8108] vm_area_dup+0x21/0x170 [ 641.003586][ T8108] __split_vma+0xad/0x570 [ 641.007942][ T8108] ? find_vma+0x30/0x170 [ 641.012399][ T8108] __do_munmap+0x368/0xef0 [ 641.016857][ T8108] mmap_region+0x227/0x1770 [ 641.021487][ T8108] ? __x64_sys_brk+0x760/0x760 [ 641.026909][ T8108] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 641.033301][ T8108] ? get_unmapped_area+0x295/0x3b0 [ 641.038534][ T8108] do_mmap+0x8e2/0x1080 [ 641.042732][ T8108] vm_mmap_pgoff+0x1c5/0x230 [ 641.047357][ T8108] ? vma_is_stack_for_current+0xd0/0xd0 [ 641.053069][ T8108] ? wait_for_completion+0x440/0x440 [ 641.058656][ T8108] ksys_mmap_pgoff+0xf7/0x630 [ 641.063452][ T8108] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 641.063472][ T8108] ? trace_hardirqs_on_thunk+0x1a/0x1c 10:24:11 executing program 0 (fault-call:0 fault-nth:2): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:11 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8847000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:11 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000069, 0x0) [ 641.063487][ T8108] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 641.063502][ T8108] ? do_syscall_64+0x26/0x610 [ 641.063518][ T8108] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.063536][ T8108] __x64_sys_mmap+0xe9/0x1b0 [ 641.063556][ T8108] do_syscall_64+0x103/0x610 [ 641.063577][ T8108] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.063588][ T8108] RIP: 0033:0x458209 [ 641.063609][ T8108] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 641.074747][ T8108] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 641.074762][ T8108] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 [ 641.074770][ T8108] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 [ 641.074779][ T8108] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 641.074788][ T8108] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 10:24:11 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000400dd6188c97b67e1a9d3c9df5d882306f866f22e2896c525527d4ff5e47fd6dd8c8c6ba53ebf0e0b01277e3ca76c946ab2ba8b189684226f871ee9dc05eade6036bdc296a6a283d624ef58efdd8d1bac87e004459995b6654d90c2129c25348fdf0532200701209c82349273d24b411be617d86f8612c8f9731735f3bb39d29f89ae2a1dc4ac2fe921e5741ce97a2f6ffc0b8314960b139df244b923c13113ee"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) [ 641.074796][ T8108] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 [ 641.271867][ T8452] FAULT_INJECTION: forcing a failure. [ 641.271867][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 641.380693][ T8452] CPU: 1 PID: 8452 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 641.389779][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.400005][ T8452] Call Trace: [ 641.403496][ T8452] dump_stack+0x172/0x1f0 [ 641.407946][ T8452] should_fail.cold+0xa/0x15 [ 641.412686][ T8452] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 641.418520][ T8452] ? ___might_sleep+0x163/0x280 [ 641.423587][ T8452] __should_failslab+0x121/0x190 [ 641.428547][ T8452] should_failslab+0x9/0x14 [ 641.433078][ T8452] kmem_cache_alloc+0x2b2/0x6f0 [ 641.437959][ T8452] ? __might_sleep+0x95/0x190 [ 641.442679][ T8452] __anon_vma_prepare+0x62/0x3c0 [ 641.447669][ T8452] do_huge_pmd_anonymous_page+0x105f/0x1730 [ 641.453840][ T8452] ? find_held_lock+0x35/0x130 [ 641.458806][ T8452] ? validate_mm+0x382/0x620 [ 641.463701][ T8452] ? __thp_get_unmapped_area+0x190/0x190 [ 641.469441][ T8452] ? pmd_val+0x100/0x100 [ 641.473795][ T8452] ? __lock_acquire+0x548/0x3fb0 [ 641.478969][ T8452] ? lock_downgrade+0x880/0x880 [ 641.483853][ T8452] __handle_mm_fault+0x2d5e/0x3ec0 [ 641.488993][ T8452] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 641.494568][ T8452] ? find_held_lock+0x35/0x130 [ 641.499675][ T8452] ? handle_mm_fault+0x322/0xb30 [ 641.504778][ T8452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.511056][ T8452] ? kasan_check_read+0x11/0x20 [ 641.515943][ T8452] handle_mm_fault+0x43f/0xb30 [ 641.520914][ T8452] __get_user_pages+0x7b6/0x1a40 [ 641.525886][ T8452] ? follow_page_mask+0x19a0/0x19a0 [ 641.531976][ T8452] ? vma_set_page_prot+0x18c/0x240 [ 641.537123][ T8452] ? memset+0x32/0x40 [ 641.541145][ T8452] populate_vma_page_range+0x20d/0x2a0 [ 641.546632][ T8452] __mm_populate+0x204/0x380 [ 641.551283][ T8452] ? populate_vma_page_range+0x2a0/0x2a0 [ 641.557047][ T8452] vm_mmap_pgoff+0x213/0x230 [ 641.561759][ T8452] ? vma_is_stack_for_current+0xd0/0xd0 [ 641.567419][ T8452] ? wait_for_completion+0x440/0x440 [ 641.572741][ T8452] ksys_mmap_pgoff+0xf7/0x630 [ 641.577540][ T8452] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 641.583207][ T8452] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 641.590049][ T8452] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 641.595544][ T8452] ? do_syscall_64+0x26/0x610 [ 641.600292][ T8452] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.606397][ T8452] __x64_sys_mmap+0xe9/0x1b0 [ 641.611128][ T8452] do_syscall_64+0x103/0x610 [ 641.615752][ T8452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.621753][ T8452] RIP: 0033:0x458209 [ 641.625688][ T8452] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 641.646830][ T8452] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 641.655580][ T8452] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 [ 641.663579][ T8452] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 [ 641.671573][ T8452] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 10:24:11 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:11 executing program 5: getgroups(0x3ffffffffffffe37, &(0x7f0000000280)=[0xee00, 0x0]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x501440) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = fcntl$dupfd(r0, 0x0, r1) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 10:24:11 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006a, 0x0) 10:24:11 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8848000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 641.679653][ T8452] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 [ 641.687817][ T8452] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 10:24:11 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8864000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:12 executing program 0 (fault-call:0 fault-nth:3): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006b, 0x0) 10:24:12 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000540)={0x6, 0x0, 0xb88, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x24800, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)=0x3000) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') getsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) write$binfmt_elf32(r3, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x80000001, 0x400, 0xf12, 0x2, 0x3, 0x200, 0x78, 0x38, 0x1a3, 0x5, 0x4, 0x20, 0x2, 0x5, 0xfff, 0x1}, [{0x70000004, 0x81, 0x21, 0x200, 0x81000, 0x100000000, 0x7f, 0x6}], "4dec99abdbbee17512dc18abaf12380ca95cc564a93cfad0fe5b4e259cf4c7ca384a8baaa570a66b5093fdbccbcb", [[], []]}, 0x286) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:12 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88a8ffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:12 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x1, r0}) 10:24:12 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) [ 641.996965][ T8566] FAULT_INJECTION: forcing a failure. [ 641.996965][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 642.112947][ T8566] CPU: 0 PID: 8566 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 642.122400][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.132624][ T8566] Call Trace: [ 642.135947][ T8566] dump_stack+0x172/0x1f0 [ 642.140439][ T8566] should_fail.cold+0xa/0x15 [ 642.145289][ T8566] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 642.151148][ T8566] ? ___might_sleep+0x163/0x280 [ 642.156204][ T8566] __should_failslab+0x121/0x190 [ 642.161490][ T8566] should_failslab+0x9/0x14 [ 642.166328][ T8566] kmem_cache_alloc+0x2b2/0x6f0 [ 642.171208][ T8566] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 642.176950][ T8566] ? anon_vma_compatible+0x70/0x2d0 [ 642.182420][ T8566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 642.188693][ T8566] __anon_vma_prepare+0x1b1/0x3c0 [ 642.193890][ T8566] do_huge_pmd_anonymous_page+0x105f/0x1730 [ 642.200073][ T8566] ? find_held_lock+0x35/0x130 [ 642.204866][ T8566] ? validate_mm+0x382/0x620 [ 642.209586][ T8566] ? __thp_get_unmapped_area+0x190/0x190 [ 642.209600][ T8566] ? pmd_val+0x100/0x100 [ 642.209615][ T8566] ? __lock_acquire+0x548/0x3fb0 [ 642.209636][ T8566] ? lock_downgrade+0x880/0x880 [ 642.229628][ T8566] __handle_mm_fault+0x2d5e/0x3ec0 [ 642.229656][ T8566] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 642.240486][ T8566] ? find_held_lock+0x35/0x130 [ 642.245328][ T8566] ? handle_mm_fault+0x322/0xb30 [ 642.250338][ T8566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 642.256610][ T8566] ? kasan_check_read+0x11/0x20 10:24:12 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) [ 642.261659][ T8566] handle_mm_fault+0x43f/0xb30 [ 642.266459][ T8566] __get_user_pages+0x7b6/0x1a40 [ 642.271529][ T8566] ? follow_page_mask+0x19a0/0x19a0 [ 642.276762][ T8566] ? vma_set_page_prot+0x18c/0x240 [ 642.282146][ T8566] ? memset+0x32/0x40 [ 642.286338][ T8566] populate_vma_page_range+0x20d/0x2a0 [ 642.291912][ T8566] __mm_populate+0x204/0x380 [ 642.296540][ T8566] ? populate_vma_page_range+0x2a0/0x2a0 [ 642.302347][ T8566] vm_mmap_pgoff+0x213/0x230 [ 642.302370][ T8566] ? vma_is_stack_for_current+0xd0/0xd0 [ 642.302394][ T8566] ? wait_for_completion+0x440/0x440 [ 642.318071][ T8566] ksys_mmap_pgoff+0xf7/0x630 [ 642.318098][ T8566] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 642.328483][ T8566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 642.334425][ T8566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 642.339998][ T8566] ? do_syscall_64+0x26/0x610 [ 642.344946][ T8566] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.351049][ T8566] __x64_sys_mmap+0xe9/0x1b0 [ 642.355688][ T8566] do_syscall_64+0x103/0x610 [ 642.360413][ T8566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.366732][ T8566] RIP: 0033:0x458209 [ 642.370792][ T8566] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 642.390601][ T8566] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 642.390616][ T8566] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 10:24:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006c, 0x0) 10:24:12 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88caffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:12 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, r0, 0x0) read(r0, &(0x7f0000000000)=""/71, 0x47) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) 10:24:12 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) [ 642.390624][ T8566] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 [ 642.390633][ T8566] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 642.390650][ T8566] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 [ 642.407480][ T8566] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 10:24:12 executing program 0 (fault-call:0 fault-nth:4): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:12 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8906000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006d, 0x0) 10:24:12 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x2, 0x8, 0xa750}}, 0x28) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r2}, 0x8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=0x0) ptrace$setregs(0xf, r6, 0x9, &(0x7f0000000340)="1339ae15b6c0135677382c0f5c01eb57c93341e74260f592665f95bb0916e6d2aaeddc0036ff7cf29d5586ea17880c9825f4ff0da72f4cf34f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r0) [ 642.549665][ T8751] FAULT_INJECTION: forcing a failure. [ 642.549665][ T8751] name failslab, interval 1, probability 0, space 0, times 0 10:24:12 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000540)={0x2, 0x80000000, 0x0, 0x0, 0x11, 0xfffffffffffffffd, 0x2, 0x4, 0x7, 0xffffffff, 0x8d9, 0x3}) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x100, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x50, 0x50, &(0x7f0000000040)=[@fda={0x66646185, 0x4, 0x1, 0x40}, @flat={0x77682a85, 0x101, r1, 0x2}, @flat={0x736a2a85, 0x10b, r1}], &(0x7f0000000100)=[0x30, 0x18, 0x68, 0x20, 0x0, 0x18, 0x38, 0x20, 0x48, 0x20]}}}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x30, &(0x7f0000000180)=[@flat={0x77682a85, 0x1, r1, 0x4}], &(0x7f00000001c0)=[0x48, 0x40, 0x38, 0x20, 0x18, 0x30]}, 0x6}}, @release={0x40046306, 0x1}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x58, 0x20, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000200), 0x1, 0x4, 0x39}], &(0x7f00000002c0)=[0x20, 0x38, 0x38, 0x38]}, 0x8000}}, @increfs_done={0x40106308, r1}], 0xfd, 0x0, &(0x7f0000000400)="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"}) 10:24:12 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfdffffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 642.777526][ T8751] CPU: 0 PID: 8751 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 642.786869][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.797326][ T8751] Call Trace: [ 642.800741][ T8751] dump_stack+0x172/0x1f0 [ 642.805112][ T8751] should_fail.cold+0xa/0x15 [ 642.809738][ T8751] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 642.815581][ T8751] ? ___might_sleep+0x163/0x280 [ 642.820640][ T8751] __should_failslab+0x121/0x190 [ 642.825782][ T8751] should_failslab+0x9/0x14 [ 642.830421][ T8751] kmem_cache_alloc+0x2b2/0x6f0 [ 642.835425][ T8751] __khugepaged_enter+0x3b/0x390 [ 642.840663][ T8751] do_huge_pmd_anonymous_page+0x1199/0x1730 [ 642.846760][ T8751] ? find_held_lock+0x35/0x130 [ 642.851644][ T8751] ? __thp_get_unmapped_area+0x190/0x190 [ 642.860025][ T8751] ? pmd_val+0x100/0x100 [ 642.866846][ T8751] ? __lock_acquire+0x548/0x3fb0 [ 642.872389][ T8751] ? lock_downgrade+0x880/0x880 [ 642.877364][ T8751] __handle_mm_fault+0x2d5e/0x3ec0 [ 642.882596][ T8751] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 642.888165][ T8751] ? find_held_lock+0x35/0x130 [ 642.893060][ T8751] ? handle_mm_fault+0x322/0xb30 [ 642.898182][ T8751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 642.904629][ T8751] ? kasan_check_read+0x11/0x20 [ 642.909507][ T8751] handle_mm_fault+0x43f/0xb30 [ 642.914406][ T8751] __get_user_pages+0x7b6/0x1a40 [ 642.919381][ T8751] ? follow_page_mask+0x19a0/0x19a0 10:24:13 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) r2 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x4c0, 0x338, 0x338, 0x278, 0x0, 0x278, 0x428, 0x428, 0x428, 0x428, 0x428, 0x4, &(0x7f0000000100), {[{{@ip={@multicast1, @multicast2, 0xffffff00, 0x0, 'caif0\x00', 'ip_vti0\x00', {0xff}, {}, 0x29, 0x3, 0x2}, 0x0, 0x218, 0x278, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'gretap0\x00', {0x9, 0x7, 0x8, 0x8, 0xffffffff, 0x2000000000000000, 0x1ebc, 0x3, 0x58, 0x8}, 0x101}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x3ff}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x1ffe000, 0x0, 0xa2, 0x334, 0x400], 0x5, 0x7f}, {0xffffffffffffff80, [0x6, 0x3ff, 0xfffffffffffffff9, 0x0, 0x174c, 0x4395], 0x8, 0xc337}}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@cluster={0x30, 'cluster\x00', 0x0, {0xa19, 0x6, 0x1b, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) [ 642.924726][ T8751] ? vma_set_page_prot+0x18c/0x240 [ 642.930002][ T8751] ? memset+0x32/0x40 [ 642.934304][ T8751] populate_vma_page_range+0x20d/0x2a0 [ 642.939787][ T8751] __mm_populate+0x204/0x380 [ 642.944409][ T8751] ? populate_vma_page_range+0x2a0/0x2a0 [ 642.950169][ T8751] vm_mmap_pgoff+0x213/0x230 [ 642.954806][ T8751] ? vma_is_stack_for_current+0xd0/0xd0 [ 642.960394][ T8751] ? wait_for_completion+0x440/0x440 [ 642.965712][ T8751] ksys_mmap_pgoff+0xf7/0x630 [ 642.970416][ T8751] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 642.976065][ T8751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 642.981553][ T8751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 642.987034][ T8751] ? do_syscall_64+0x26/0x610 [ 642.991728][ T8751] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.997810][ T8751] __x64_sys_mmap+0xe9/0x1b0 [ 643.002421][ T8751] do_syscall_64+0x103/0x610 [ 643.007035][ T8751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.012933][ T8751] RIP: 0033:0x458209 [ 643.016834][ T8751] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 643.036541][ T8751] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 643.044956][ T8751] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 [ 643.052933][ T8751] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 [ 643.060916][ T8751] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 643.068896][ T8751] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 10:24:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006e, 0x0) [ 643.076874][ T8751] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 10:24:13 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfeffffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000006f, 0x0) 10:24:13 executing program 0 (fault-call:0 fault-nth:5): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) [ 643.350887][ T9052] FAULT_INJECTION: forcing a failure. [ 643.350887][ T9052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.407397][ T9052] CPU: 0 PID: 9052 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 643.416461][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.426523][ T9052] Call Trace: [ 643.429832][ T9052] dump_stack+0x172/0x1f0 [ 643.434186][ T9052] should_fail.cold+0xa/0x15 [ 643.438825][ T9052] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 643.444634][ T9052] ? find_held_lock+0x35/0x130 [ 643.449427][ T9052] should_fail_alloc_page+0x50/0x60 [ 643.454631][ T9052] __alloc_pages_nodemask+0x1a1/0x7e0 [ 643.460021][ T9052] ? __khugepaged_enter+0x28d/0x390 [ 643.465224][ T9052] ? __alloc_pages_slowpath+0x2900/0x2900 [ 643.470965][ T9052] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 643.477203][ T9052] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 643.483446][ T9052] alloc_pages_vma+0x39a/0x540 [ 643.488213][ T9052] do_huge_pmd_anonymous_page+0x509/0x1730 [ 643.494017][ T9052] ? find_held_lock+0x35/0x130 [ 643.498785][ T9052] ? __thp_get_unmapped_area+0x190/0x190 [ 643.504417][ T9052] ? pmd_val+0x100/0x100 [ 643.508654][ T9052] ? __lock_acquire+0x548/0x3fb0 [ 643.513585][ T9052] ? lock_downgrade+0x880/0x880 [ 643.518432][ T9052] __handle_mm_fault+0x2d5e/0x3ec0 [ 643.523549][ T9052] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 643.530550][ T9052] ? find_held_lock+0x35/0x130 [ 643.535312][ T9052] ? handle_mm_fault+0x322/0xb30 [ 643.540250][ T9052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.546498][ T9052] ? kasan_check_read+0x11/0x20 [ 643.551353][ T9052] handle_mm_fault+0x43f/0xb30 [ 643.556117][ T9052] __get_user_pages+0x7b6/0x1a40 [ 643.561057][ T9052] ? follow_page_mask+0x19a0/0x19a0 [ 643.566253][ T9052] ? vma_set_page_prot+0x18c/0x240 [ 643.571369][ T9052] ? memset+0x32/0x40 [ 643.575355][ T9052] populate_vma_page_range+0x20d/0x2a0 [ 643.580812][ T9052] __mm_populate+0x204/0x380 [ 643.585398][ T9052] ? populate_vma_page_range+0x2a0/0x2a0 [ 643.591035][ T9052] vm_mmap_pgoff+0x213/0x230 [ 643.595627][ T9052] ? vma_is_stack_for_current+0xd0/0xd0 [ 643.601168][ T9052] ? wait_for_completion+0x440/0x440 [ 643.606548][ T9052] ksys_mmap_pgoff+0xf7/0x630 [ 643.611223][ T9052] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 643.616856][ T9052] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 643.622313][ T9052] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 643.627766][ T9052] ? do_syscall_64+0x26/0x610 [ 643.632443][ T9052] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.639115][ T9052] __x64_sys_mmap+0xe9/0x1b0 [ 643.643707][ T9052] do_syscall_64+0x103/0x610 [ 643.648302][ T9052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.654190][ T9052] RIP: 0033:0x458209 [ 643.658083][ T9052] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 643.678182][ T9052] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 643.686590][ T9052] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 [ 643.694553][ T9052] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 10:24:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:13 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x2, 0x10) 10:24:13 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffffffffffff000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 643.702521][ T9052] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 643.710485][ T9052] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 [ 643.718453][ T9052] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 10:24:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000070, 0x0) 10:24:13 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0xffffffffffffffff) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) writev(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)="7f499c4a2556e7357e0ac9cc764eb7ccf4aa720e3fc5bd8280b575b888d8419388695d2512816edeab94859c5fa8163aceea5b9e100eb2c928937bdc8f176ad11985c1b6c5157e0a83e819aad04dd80586354f2b590c8a92cf7be87b600b0cfcd6d2492a1e1f24c0f07d7bf2d8fd9a53fde9f3b4cbd455cbb5db694410e0c6efd49e2c8608ca10e90c3d44071da045fb07d706062236a2e737a155ba23d161870fffa7fea8af02e3ff", 0xa9}], 0x1) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532000a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x6}}, 0x400, 0x86b8}, &(0x7f0000000180)=0x90) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:14 executing program 0 (fault-call:0 fault-nth:6): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:14 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000071, 0x0) 10:24:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:14 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000072, 0x0) 10:24:14 executing program 5: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:14 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x410, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000400)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:14 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) 10:24:14 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000073, 0x0) [ 644.333097][ T9200] FAULT_INJECTION: forcing a failure. [ 644.333097][ T9200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.472466][ T9200] CPU: 1 PID: 9200 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 644.481537][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.491601][ T9200] Call Trace: [ 644.494914][ T9200] dump_stack+0x172/0x1f0 [ 644.499272][ T9200] should_fail.cold+0xa/0x15 [ 644.503882][ T9200] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 644.509699][ T9200] ? ___might_sleep+0x163/0x280 [ 644.514567][ T9200] should_fail_alloc_page+0x50/0x60 [ 644.519771][ T9200] __alloc_pages_nodemask+0x1a1/0x7e0 [ 644.525152][ T9200] ? mem_cgroup_throttle_swaprate+0x196/0x66e [ 644.531232][ T9200] ? __alloc_pages_slowpath+0x2900/0x2900 [ 644.536966][ T9200] ? kasan_check_read+0x11/0x20 [ 644.541826][ T9200] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 644.548074][ T9200] alloc_pages_current+0x107/0x210 [ 644.553273][ T9200] pte_alloc_one+0x1b/0x1a0 [ 644.557796][ T9200] do_huge_pmd_anonymous_page+0x6f4/0x1730 [ 644.563608][ T9200] ? find_held_lock+0x35/0x130 [ 644.568386][ T9200] ? __thp_get_unmapped_area+0x190/0x190 [ 644.574026][ T9200] ? __lock_acquire+0x548/0x3fb0 [ 644.574040][ T9200] ? lock_downgrade+0x880/0x880 [ 644.574060][ T9200] __handle_mm_fault+0x2d5e/0x3ec0 [ 644.574081][ T9200] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 644.574095][ T9200] ? find_held_lock+0x35/0x130 [ 644.574114][ T9200] ? handle_mm_fault+0x322/0xb30 [ 644.588997][ T9200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.589031][ T9200] ? kasan_check_read+0x11/0x20 [ 644.615320][ T9200] handle_mm_fault+0x43f/0xb30 10:24:14 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) [ 644.620119][ T9200] __get_user_pages+0x7b6/0x1a40 [ 644.625078][ T9200] ? follow_page_mask+0x19a0/0x19a0 [ 644.630284][ T9200] ? vma_set_page_prot+0x18c/0x240 [ 644.635405][ T9200] ? memset+0x32/0x40 [ 644.639913][ T9200] populate_vma_page_range+0x20d/0x2a0 [ 644.639934][ T9200] __mm_populate+0x204/0x380 [ 644.639953][ T9200] ? populate_vma_page_range+0x2a0/0x2a0 [ 644.655620][ T9200] vm_mmap_pgoff+0x213/0x230 [ 644.660224][ T9200] ? vma_is_stack_for_current+0xd0/0xd0 [ 644.665773][ T9200] ? wait_for_completion+0x440/0x440 [ 644.665808][ T9200] ksys_mmap_pgoff+0xf7/0x630 [ 644.675763][ T9200] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 644.681404][ T9200] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 644.686875][ T9200] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 644.686892][ T9200] ? do_syscall_64+0x26/0x610 [ 644.686916][ T9200] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.703099][ T9200] __x64_sys_mmap+0xe9/0x1b0 [ 644.707704][ T9200] do_syscall_64+0x103/0x610 [ 644.712310][ T9200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.718200][ T9200] RIP: 0033:0x458209 [ 644.722100][ T9200] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.741705][ T9200] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 644.741720][ T9200] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 [ 644.741728][ T9200] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 [ 644.741737][ T9200] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 644.741745][ T9200] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 [ 644.741752][ T9200] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 10:24:15 executing program 0 (fault-call:0 fault-nth:7): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:15 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000074, 0x0) 10:24:15 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x4, 0x4, 0x4, 0x81, 0x5, 0x1, 0x7}, {0xc0000001, 0x9, 0x1, 0x9, 0x8001, 0x6, 0x7}, {0xc0000003, 0x3, 0x1, 0x7fffffff, 0x1f, 0x7fffffff, 0x6}]}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 645.001028][ T9467] FAULT_INJECTION: forcing a failure. [ 645.001028][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 645.083534][ T9467] CPU: 1 PID: 9467 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 645.092603][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.102665][ T9467] Call Trace: [ 645.105970][ T9467] dump_stack+0x172/0x1f0 [ 645.110319][ T9467] should_fail.cold+0xa/0x15 [ 645.114919][ T9467] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 645.120737][ T9467] ? ___might_sleep+0x163/0x280 [ 645.125631][ T9467] __should_failslab+0x121/0x190 [ 645.130578][ T9467] should_failslab+0x9/0x14 [ 645.135091][ T9467] kmem_cache_alloc+0x2b2/0x6f0 [ 645.139951][ T9467] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 645.146206][ T9467] ptlock_alloc+0x20/0x70 [ 645.150543][ T9467] pte_alloc_one+0x6d/0x1a0 [ 645.155053][ T9467] do_huge_pmd_anonymous_page+0x6f4/0x1730 [ 645.160853][ T9467] ? find_held_lock+0x35/0x130 [ 645.165623][ T9467] ? __thp_get_unmapped_area+0x190/0x190 [ 645.171250][ T9467] ? __lock_acquire+0x548/0x3fb0 [ 645.176184][ T9467] ? lock_downgrade+0x880/0x880 [ 645.181043][ T9467] __handle_mm_fault+0x2d5e/0x3ec0 [ 645.186157][ T9467] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 645.191698][ T9467] ? find_held_lock+0x35/0x130 [ 645.196456][ T9467] ? handle_mm_fault+0x322/0xb30 [ 645.201395][ T9467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.207635][ T9467] ? kasan_check_read+0x11/0x20 [ 645.212487][ T9467] handle_mm_fault+0x43f/0xb30 [ 645.217252][ T9467] __get_user_pages+0x7b6/0x1a40 [ 645.222197][ T9467] ? follow_page_mask+0x19a0/0x19a0 [ 645.227392][ T9467] ? vma_set_page_prot+0x18c/0x240 [ 645.232518][ T9467] ? memset+0x32/0x40 [ 645.236508][ T9467] populate_vma_page_range+0x20d/0x2a0 [ 645.241967][ T9467] __mm_populate+0x204/0x380 [ 645.246560][ T9467] ? populate_vma_page_range+0x2a0/0x2a0 [ 645.252196][ T9467] vm_mmap_pgoff+0x213/0x230 [ 645.256785][ T9467] ? vma_is_stack_for_current+0xd0/0xd0 [ 645.262326][ T9467] ? wait_for_completion+0x440/0x440 [ 645.267619][ T9467] ksys_mmap_pgoff+0xf7/0x630 [ 645.272299][ T9467] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 645.277928][ T9467] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 645.283384][ T9467] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 645.288859][ T9467] ? do_syscall_64+0x26/0x610 [ 645.293534][ T9467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.299603][ T9467] __x64_sys_mmap+0xe9/0x1b0 [ 645.304194][ T9467] do_syscall_64+0x103/0x610 [ 645.308792][ T9467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.314676][ T9467] RIP: 0033:0x458209 [ 645.318565][ T9467] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.338180][ T9467] RSP: 002b:00007f53f3b79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 645.346592][ T9467] RAX: ffffffffffffffda RBX: 00007f53f3b79c90 RCX: 0000000000458209 [ 645.354559][ T9467] RDX: 000000000000000f RSI: 0000000000002000 RDI: 0000000020ffd000 [ 645.362527][ T9467] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 645.370491][ T9467] R10: 0000000000008032 R11: 0000000000000246 R12: 00007f53f3b7a6d4 10:24:15 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:15 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x7, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:15 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000075, 0x0) 10:24:15 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) pipe2(&(0x7f0000000100), 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) [ 645.378562][ T9467] R13: 00000000004c3ee8 R14: 00000000004d70f0 R15: 0000000000000003 10:24:15 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) recvfrom$inet6(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x100, &(0x7f0000000000)={0xa, 0x4e21, 0x757, @mcast1, 0x5}, 0x1c) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:15 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:15 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000076, 0x0) 10:24:15 executing program 0 (fault-call:0 fault-nth:8): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:15 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x80) 10:24:15 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:15 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000077, 0x0) 10:24:16 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:16 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:16 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:16 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000040)=""/109) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:16 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) connect(r2, &(0x7f0000000300)=@rc={0x1f, {0x100, 0x8, 0x8, 0x200, 0x5, 0xfffffffffffff82a}, 0x2}, 0x80) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="4aec085ffa5a6d62d12acf4b618183135c3a1e65c5d83494ee04bd09fbcedb52242486666a4d927bc0141534c15d5327329eb3779605de69afe3d91f20ccbac83626a404eef04083b305a62b3d13aa2c2ff654dc3026eed370fc71d206dae4d07a4947063e8cc3915a103e072c3b809c2aff3584f953877bd363b443ffde1f32af00d66fa353f3c8de00b4e5090548ffad943bf5ecc773ff69726fa914701992c056b53224e441a44b5d3c871ea3471b0fb11f829764b1d57a92681b41aa676f81257a57c8c1a8092630c90266995a23255d10be45e942eefa2185"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) timer_create(0x7, &(0x7f0000000180)={0x0, 0x4, 0x2}, &(0x7f00000003c0)=0x0) timer_getoverrun(r4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) write$binfmt_misc(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r0) 10:24:16 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000078, 0x0) 10:24:16 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:16 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000079, 0x0) 10:24:16 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x201e, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:16 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x14, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:16 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:16 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0xfa01, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:16 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x4) sendmsg$nfc_llcp(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x27, 0x0, 0x2, 0x1, 0x9, 0xe661, "5b1eede2a4268732c2d8136b82fe1be542ff1ac5a5059b48ea9163e371fec499a5ad8c6ac9b1fd71d1f0862793f3e26f8b598cf76607721887930fa3c09a55", 0x3c}, 0x60, &(0x7f0000000080)=[{&(0x7f0000000180)="fa9412585dfb6ba7a72408c8572ffbfbd6aff058e285c3efb701ee58ec4b88e60004a45552be75501dfd1cff79a763ede0ebc3814b62293ecc936e517585993261055fc7684b", 0x46}], 0x1, &(0x7f0000000200)={0x88, 0x112, 0x7f, "799f5674ccc11b1a7168a1fef620be1738b30b2390ac3904fdcf131e08c88ee7b2bb662e71ef036dc79af6b950c43a2ebf5f264ffd6a930bd2bf34b5fdea76f7c0ea5ae8f23f6b714245acbd2409b65f21498592195fcbbc725855949be65597110ebfa1264a0e78d09f2b2d0cad854a49"}, 0x88, 0x24000011}, 0x801) 10:24:16 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x28, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:16 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000007a, 0x0) 10:24:16 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x9, @output={0x1000, 0x1, {0x6, 0x66}, 0x1, 0x1000}}) 10:24:16 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x7fffdf002000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x101000, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) r2 = request_key(&(0x7f0000000840)='user\x00', &(0x7f0000000880)={'syz', 0x2}, &(0x7f00000008c0)='\x18keyring\x00', 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/nullb0\x00', 0x4002, 0x0) recvmsg(r3, &(0x7f0000000800)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000100)=""/34, 0x22}], 0x4, &(0x7f0000000700)=""/247, 0xf7}, 0x140) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) fsetxattr$security_ima(r3, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000a00)=@ng={0x4, 0x13, 'I'}, 0x3, 0x1) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x1ce, &(0x7f0000000a80)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x800}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x60, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000007b, 0x0) 10:24:17 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x0, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}}, 0x20000000) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r3, &(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={'syz', 0x1}, r4) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) 10:24:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000007c, 0x0) 10:24:17 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8032, 0xffffffffffffffff, 0x0) 10:24:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) exit_group(0x68e0) prctl$PR_SET_DUMPABLE(0x4, 0x3) r3 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000d17000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) preadv(r2, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000400000000080000ff7fda7cf338af995cc8577ccf9a2c8563a26d42f024b7e7c9ec64ea325a2ac467ef63b9f0d1d9880f0f3f1b53fbd9434ee77ab55a2cbe9a398f69e6432f8b84cd8e27dcf94902dd1e4754de7af1b288f384d08ec24a3016c8132251a4220909be4cdef2e7ae7267cc83c2d4b47f9ffb5602ecd50e37ea4a3c"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x100, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) write$binfmt_misc(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv6_getrule={0x20, 0x22, 0x600, 0x70bd2d, 0x25dfdbff, {0xa, 0x34, 0x80, 0x200, 0x5, 0x0, 0x0, 0x3, 0x4}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) getsockopt$bt_hci(r8, 0x0, 0x3, &(0x7f0000000300)=""/96, &(0x7f0000000480)=0x60) dup2(r8, r0) 10:24:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x543, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000007d, 0x0) 10:24:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4400, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a42e05a30d34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074a8690e559cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:17 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1fa, 0x8032, 0xffffffffffffffff, 0x0) 10:24:17 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x3}}, 0x10) 10:24:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000007e, 0x0) 10:24:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x600, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:17 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x2) 10:24:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000082, 0x0) 10:24:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x608, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:18 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x803d, r0, 0x0) 10:24:18 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1e) 10:24:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x689, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:18 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) r2 = add_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000840)='./file0\x00', r3}, 0xfffffffffffffeb7) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) process_vm_readv(r7, &(0x7f0000000440)=[{&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)}], 0x2, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/67, 0x43}, {&(0x7f0000000700)=""/142, 0x8e}], 0x4, 0x0) setsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000100)=0x1ff, 0x4) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r0) 10:24:18 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000083, 0x0) 10:24:18 executing program 5: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:18 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:18 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1e00) 10:24:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x700, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:18 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000084, 0x0) 10:24:18 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x10001, 0x200000) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000180)={0xfffffffffffffc00, 0xffffffffffffffff, 0x9}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000340)={0x0, @aes128, 0x3, "7c4f5de28d41ce84"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x40000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @local}, &(0x7f00000005c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:18 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0xffffffffffffff40, 0x5, 0x8, 0x8001, 0x4}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/72) 10:24:18 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1f00) 10:24:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x806, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:18 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000085, 0x0) 10:24:18 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x2000) 10:24:18 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000086, 0x0) 10:24:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb00, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x0, 0x401) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/69) 10:24:19 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x3f00) 10:24:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000087, 0x0) 10:24:19 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65fb10600000000000000b7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a1474cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532420a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566700000000000000000000000000000000"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd00, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:19 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x4000) 10:24:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000088, 0x0) 10:24:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xe80, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:19 executing program 5: r0 = semget(0x0, 0x1, 0x200) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000040)=""/34) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'tunl0\x00', 0x400}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000089, 0x0) 10:24:19 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x200000) 10:24:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1400, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:19 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x400000) 10:24:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000008a, 0x0) 10:24:19 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x22) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x42, 0x8032, 0xffffffffffffffff, 0x49) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x1, @loopback, 0x3ff}}, 0x9, 0x7}, 0x90) close(r0) 10:24:19 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0x156}], 0x3, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x501000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x4000, 0x0) syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x200) pipe(&(0x7f0000000340)) openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x80000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x8000000000000245, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x200004, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil) shmget$private(0x0, 0x3000, 0xa, &(0x7f0000ffc000/0x3000)=nil) shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r5 = shmget$private(0x0, 0x2000, 0xa00, &(0x7f0000f1e000/0x2000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000440)=""/19) socket$inet(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000480)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getsockname(r6, &(0x7f0000000140)=@ipx, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x6, 0x8) 10:24:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:19 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1000000) 10:24:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000008b, 0x0) 10:24:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:20 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x2000000) 10:24:20 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:20 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="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", 0xfa, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000200)=@builtin='builtin_trusted\x00') syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:20 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3580, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:20 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1e000000) 10:24:20 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000008c, 0x0) 10:24:20 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:20 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3f00, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:20 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000008d, 0x0) 10:24:20 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:20 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1f000000) 10:24:20 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x3) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x4, 0x0, [{0x842, 0x0, 0x7ff}, {0x82b, 0x0, 0x4}, {0x26d, 0x0, 0x5617}, {0xbff, 0x0, 0x2}]}) 10:24:20 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000008e, 0x0) 10:24:21 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9fec1ed8d0e3d1681b0d6a14a4b05909daa5b7377170d92950402794430158d4f3dae9bea5eb79d5fb1db351a0c6308e237f4a154349f8d2e388f0d9b8ae7eb3815c75ca5ec2d134fddf4effa04edb66449b9296909ddad94baf26c410878e7ceb2dcee041c10216973064f098f0d343d716a7394e4bc4849046b7c0653a5592a6c2"], &(0x7f00000006c0)=0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1002}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r3, 0x9}}, 0x10) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) keyctl$update(0x2, r4, &(0x7f0000002400)="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", 0x1000) write$binfmt_misc(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33df4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0df015fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1053576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r8, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r6, &(0x7f0000000000), 0xfffffce4}]) r9 = socket$xdp(0x2c, 0x3, 0x0) dup2(r9, r0) 10:24:21 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x3f000000) 10:24:21 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:21 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000008f, 0x0) 10:24:21 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0xa) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:21 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4788, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:21 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x400000000000) 10:24:21 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000090, 0x0) 10:24:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x401, 0x80000) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x71f, 0x1, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x5, 0x81, 0x101, 0x8001, 0x80000001, 0x40, 0x8001, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={r2, 0x0, 0x10, 0x400, 0x8b}, &(0x7f00000002c0)=0x18) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x401, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) 10:24:21 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x20000000000000) 10:24:21 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4888, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:21 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x100, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) shmget$private(0x0, 0x3000, 0x54000008, &(0x7f00001d4000/0x3000)=nil) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dc5519c2294dc67843146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) ioctl$KDDISABIO(r2, 0x4b37) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r1, r6) 10:24:21 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000091, 0x0) 10:24:21 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x100000000000000) 10:24:21 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:21 executing program 5: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x803e, 0xffffffffffffffff, 0x0) 10:24:21 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x200000000000000) 10:24:21 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6488, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:21 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14408}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="97720000", @ANYRES16=r2, @ANYBLOB="00032dbd7000ffdbdf25040000000800020004000000080002008e00000014000100000000000000000000000000000000001400010000000000000000000000ffffac1414aa08000200df000000080002004000000014000400090000000500000001000000010000000800060000000000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40000) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x0, 0x2, 0x1}, 0x10000}}, 0x18) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10000) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:21 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000092, 0x0) 10:24:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000300)={0x7f, 0x0, 0x100000000, 0x5}, 0xffffffffffffff98) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4df75b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:21 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1e00000000000000) 10:24:22 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x0, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:22 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800e, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000093, 0x0) 10:24:22 executing program 5: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:22 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1f00000000000000) 10:24:22 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8035, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:22 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) fdatasync(r0) 10:24:22 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x3f00000000000000) 10:24:22 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994dd83d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000094, 0x0) 10:24:22 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8100, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:22 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x0, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:22 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x8000000000000000) 10:24:22 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000200)=0x91) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x18, 0x6, 0xf, 0x1e, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@remote, 0xb, 0x14, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d4}, @sadb_x_nat_t_type={0x1}, @sadb_key={0x14, 0x8, 0x4b8, 0x0, "0e9b783b640aa5b0fcb51f9a1167741c8ee8ede2e72fc453ea60f3fd86f976355c84d6fd8cca788456b622b9a3c93edae2a8293a96d156d44d4bb3182d19b0b780f171ee8899bd0f05106cdb3426e7f13b0afd056c4332853171aed5e538dba57437319ad601fb26eba649cfee67149f2a483c137642aa097dab581310cbd4623199d31fbd4e325d9ccd3793f13c66ba91a3e278df3f0e"}]}, 0xf0}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000095, 0x0) 10:24:22 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8847, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:22 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_reqkey_keyring(0xe, 0x7) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) connect$can_bcm(r2, &(0x7f0000000300)={0x1d, r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:22 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0xffffffff00000000) 10:24:22 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x0, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:22 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8848, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {&(0x7f0000001880)=""/129, 0x81}], 0x2}}], 0x1, 0x120, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb9619", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:22 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x80000000, 0xffffffff, 0x1, 0x82, 0x7, 0x40, 0x10, 0x5}}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0xfffffffffffffffd) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="a77ff865e5591fe91269f986cb51951ac3f5e9b8c8ff17395d66f8be8f32720a772ad058cf37ab46099e35cced794133ef3749c68fc69ff92f254957801bea82c5adcb228ff2d86f0921d6a46aa8ef5942dd190fad78bb00a0cccc097f84ce40bc69f2849ac44962f7b2fe35433e391a7e8af6bb68712bd0979fa377", 0x7c) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080)=0x3) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0xffffffffffffffb8, 0x0, 0x2018, 0x5, 0x0, {0x7f, 0x8}}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 10:24:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000096, 0x0) 10:24:22 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) 10:24:23 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8864, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:23 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8906, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:23 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000097, 0x0) 10:24:23 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x10001}, 0x4) 10:24:23 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 10:24:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000300)=""/104, 0xdb}, {0xffffffffffffffff, 0x22c}, {&(0x7f0000000640)=""/51, 0x33}, {&(0x7f00000004c0)=""/184, 0xffffffffffffff7e}, {&(0x7f0000003400)=""/4096, 0x5}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000180)=""/41, 0xfffffffffffffee2}], 0x8, 0x1000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:23 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:23 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000098, 0x0) 10:24:23 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x79, 0x8040) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@initdev, @broadcast, @dev}, &(0x7f0000000100)=0xc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:23 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0ffff, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000099, 0x0) 10:24:23 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:23 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000180)={0xdc, "18c8ddee6b0e5da5a11781e9be98cc5cfdd58850b39041c7165f89985d1943b5", 0x400, 0x401, 0x5, 0xf, 0x4}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x101000) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) 10:24:23 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:23 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x180010, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001180)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001280)={@remote, @empty, @empty, 0x8, 0x9, 0xffffffff00000001, 0x400, 0x6, 0x100c4, r1}) 10:24:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000009a, 0x0) 10:24:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000009b, 0x0) 10:24:23 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000640)='/dev/admmidi#\x00', 0x10001, 0x8000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000a00)={0x368, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaeb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xe8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff0eef}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0004000553080000000000a5ed3b748455d8f7b8b0cb400c5b379ee61970abec2b7436d24d99732a51b22414a3876813b4e8c746e104b1cbbe0580536bef5d81ca9db2ba8ae7531cc93d04623964f7acd1d655b2f8f5e0f08437632c84d993629e713552136a9db674dfd39d314aa793"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = syz_open_dev$audion(&(0x7f0000000dc0)='/dev/audio#\x00', 0x7afe, 0x20001) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f0000000300)='./file0\x00', 0x80000001, 0x2, &(0x7f0000000340)=[{&(0x7f00000003c0)="97cb63e8be4ceb97e89ec6283e1700c22c5ce20ce648d86380d3632fe44779b1b8fe7416e00f27173f32124f7c82b7b38cbeeae9c66319c6701020eed657ffa4aa2bd3fe4be17b3b26cf19410cfb0f4b9ef9f9afd99dd75988f39e32a852fe6e341298938caea2ef5e1aad4e4b9e5359f1f3738b029c8fe174", 0x79, 0x1}, {&(0x7f0000000440)="68ac8284e4567a4d6895e69396be1b9beef8dc5b6811d1aeabefedcd98e810240d638ab70637a1f7bc6a99ecbf5849597192390d08fa96f5a9abfef7bb04c1b306e30dab901ddb8556ba3dafe9a47c614c3163b344a7014d4a0f50ea33c44034db79a3bb2616f9093dca7b45e8107f32f44a36d0866660c3eaa6baada9f0d1913f1922eef4a2f408bfdddbcb5534ff08ee2ea0427b94ffe256b2556343b211898009043621bc1f3982199457d0cf9102e40b28327506ded03f7105a61e57ffcb40bc120a5310b3486f8bc046186f73d4156bf5d8774ba73acc8ef19f75e605f2f96d0b6538044fba644c7e901ca5", 0xee, 0x7}], 0x80000, &(0x7f0000000700)=ANY=[@ANYBLOB='acl,resize=0x0000000000000005,errors=contie,data=journCl,tailv=off,block-allocator=no_unhashed_relocation,notail,dont_measure,euid<\x00\x00', @ANYRESDEC=r5, @ANYBLOB=',fscontext=system_u,appraise,mask=^MAY_APPEND,subj_type=/dev/ashmem\x00,\x00']) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'teql0\x00', 0x1000}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x13, r1, 0x0) write$binfmt_misc(r7, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02ccfcd64a402007ba88175274368a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707570700000000000000d23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce6ec0ee03567d62"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x2000, 0xa, &(0x7f000029a000/0x2000)=nil) io_submit(r8, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r6, &(0x7f0000000000), 0xfffffce4}]) r9 = socket$xdp(0x2c, 0x3, 0x0) dup2(r9, r0) 10:24:23 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x7}) 10:24:24 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:24 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000009c, 0x0) 10:24:24 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:24 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x220000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0xff], 0x1, 0x8000, 0x0, 0x0, 0x4, 0x7, {0x7, 0x1, 0x3f, 0xffffffffffffff5a, 0xff, 0x8001, 0x9, 0x0, 0x0, 0x8, 0x8001, 0x1, 0x9, 0x100, "e78d504fcaca9e2d0e1d19cad024bbdf74239210183df9fd86bde63212b2a2e4"}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x2, "b3346ff2bfaafcdf"}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x1) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:24:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000009d, 0x0) 10:24:24 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x2000000900000000, 0x7}, 0xffffffffffffff55) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000402000000080000ff7f0f08f0a6fa77de81ee2dbafd3c17455edcc6295737b51bc90ba55c1d7e6f15878b08"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x400000000ff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x80000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000300)) socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@flushsa={0x14, 0x1c, 0x401}, 0x14}, 0x8}, 0x0) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r0) 10:24:24 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x3, r1}) 10:24:24 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x7000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000009e, 0x0) [ 654.377220][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:24:24 executing program 0: mmap$binder(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 10:24:24 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:24 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x130, r0, 0xfffffffffffffffd) 10:24:24 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:24 executing program 0: shmget$private(0x0, 0x3000, 0x140, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x40041) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000009f, 0x0) 10:24:24 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380), 0x1000000000000134, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="690bddfebf64f3d109af6d29c08461ea027eb18bacf2e4940cf10f9e7c81fff2fd69e07df4698d65cb32921062a106c7b269001895823a6a5232b608aa1fd44d8f13e6ce03605b790f85f1a7680840182fcc8cff3223227dbeb5a79dd246aeaeaca1f240e5c31f0f86837db3941594701a0e6d91c9d5114a9f2559c67e541f75ec5b43e5c48af85e345c5b6e2225"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) read$rfkill(r2, &(0x7f0000000100), 0x8) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x80000440140, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca6ada7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162835b56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:25 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8060000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:25 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000100), 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x803f, r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x9, {{0x2, 0x4e21, @rand_addr=0x4}}}, 0x88) ioperm(0x7fffffff, 0x5, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200000) 10:24:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a0, 0x0) 10:24:25 executing program 0: mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x8032, 0xffffffffffffffff, 0x100) r0 = dup(0xffffffffffffffff) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 10:24:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000100)) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:24:25 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:25 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x37eeef0544ac82d2, 0xffffffffffffffff, 0x0) 10:24:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a1, 0x0) 10:24:25 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0xfffffffffffffffb, 0x8}, {0x800, 0x1}], r1}, 0x18, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 10:24:25 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/backup_only\x00^\xf6Y\xd9\xee\x8e\xcd^\xd7\x83\xe86\xbf\xc5hI\x14.\xb3\x0f\x8e\xdb6%\xb5\xdcK2\x0f G\xab\xbb\xb7\x81\xfb\xa0\x17B\xc8\xbb\x96U+\xd4\n\x9a\r\xa7\xdf\x9a\xe1.\xc3\x9b\xd0\x0f\x04\xee\xafY\x10\xb6\xa9', 0x2, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x1000000000, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x200400, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000400)=""/225, 0xe1}], 0x1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000914000/0x2000)=nil, 0x2000, 0x0, 0x20000000004014, r1, 0x0) write$binfmt_misc(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af6593da074ad23cade2cecfaf942b0b4dd95b5324d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e56000000000000"], 0xe4) io_setup(0x6, &(0x7f0000000040)=0x0) fcntl$getown(r3, 0x9) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r0) 10:24:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a2, 0x0) 10:24:25 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 10:24:25 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x14000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:25 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:24:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a3, 0x0) 10:24:25 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:25 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0xd0e, 0xe9ab, 0x5}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:24:26 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/4096) 10:24:26 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x28000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:26 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a4, 0x0) 10:24:26 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:24:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x80) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:24:26 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:24:26 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(r0, &(0x7f0000000080)="89062ce974cb21da106ca622075cba84718038b68bdbc686f52fbbdb4e3e896abc8e", 0x22, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000180)={0x1, 0x0, 0xfffffffffffffffc, 0x20, 0x6, 0x8}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r1, 0x1f, &(0x7f0000000100)) 10:24:26 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a5, 0x0) 10:24:26 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3f000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:26 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x40000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:26 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') read$FUSE(r0, &(0x7f00000001c0), 0x1000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x49}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffffffffe10d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x54) 10:24:26 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a6, 0x0) 10:24:26 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x8031, r0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0xd000) 10:24:26 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x43050000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:24:26 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001040)={0x1000, &(0x7f0000000040)="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"}) [ 768.605990][ T45] device bridge_slave_1 left promiscuous mode [ 768.621232][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.675516][ T45] device bridge_slave_0 left promiscuous mode [ 768.681745][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.035072][ T45] device hsr_slave_1 left promiscuous mode [ 772.068856][ T45] device hsr_slave_0 left promiscuous mode [ 772.138715][ T45] team0 (unregistering): Port device team_slave_1 removed [ 772.165580][ T45] team0 (unregistering): Port device team_slave_0 removed [ 772.185817][ T45] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 772.324148][ T45] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 772.444862][ T45] bond0 (unregistering): Released all slaves [ 775.620131][T14343] syz-executor.2 (14343) used greatest stack depth: 21544 bytes left 10:26:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:26:25 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x60000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:26:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x20, 0x3ff, 0x1ff, 0x9, 0x8e, 0x1, 0x5, 0x9, 0x591, 0x3, 0x8, 0x80000, 0x581, 0x1, 0x5, 0x720f629a], 0x100002, 0x109400}) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x60, r5, 0x804, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f800000000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x60}}, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x401, 0xffff, 0x4f8, 0x4, 0x13, 0x4, 0x3, 0x0, 0xc, 0x9fad}) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r7 = socket$xdp(0x2c, 0x3, 0x0) dup2(r7, r0) 10:26:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a7, 0x0) 10:26:26 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8032, r1, 0x2000000000000003) 10:26:26 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2200, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)="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", 0x1000) 10:26:26 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800e0000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:26:26 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @loopback}], 0x1a) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x100, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/44) 10:26:26 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a8, 0x0) 10:26:26 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x4, 0x98a, 0x3, 0x5, 0x3, 0x8, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x2, 0x20}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000140)={0x36, @local, 0x4e21, 0x2, 'wlc\x00', 0x2a, 0x1, 0x6b}, 0x2c) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x7fffffff) 10:26:26 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x80350000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:26:26 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000a9, 0x0) [ 778.340519][T14903] IPVS: ftp: loaded support on port[0] = 21 [ 778.485791][T14903] chnl_net:caif_netlink_parms(): no params data found [ 778.551438][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.565777][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.585680][T14903] device bridge_slave_0 entered promiscuous mode [ 778.593905][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.601032][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.609437][T14903] device bridge_slave_1 entered promiscuous mode [ 778.630917][T14903] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 778.645886][T14903] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 778.676997][T14903] team0: Port device team_slave_0 added [ 778.687282][T14903] team0: Port device team_slave_1 added [ 778.765863][T14903] device hsr_slave_0 entered promiscuous mode [ 778.812436][T14903] device hsr_slave_1 entered promiscuous mode [ 778.861071][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.868198][T14903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.875624][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.882736][T14903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.959822][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.981085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 778.991344][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.004831][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.019044][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 779.035576][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.054572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.070173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.077321][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.109226][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.118954][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.126085][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.161632][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.179693][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.189392][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 779.204182][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 779.218941][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 779.229813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 779.267457][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 10:26:45 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000aa, 0x0) 10:26:45 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) write$apparmor_current(r0, &(0x7f0000000000)=@hat={'permhat ', 0x4, 0x5e, ['eth1%\\.em1eth0#.usermime_typevmnet1\'\x00', '\xf7vboxnet1cpusetvboxnet1[cgroup&/\x00', '\x00', '/dev/cec#\x00', '/dev/cec#\x00', 'mime_type.\x9fmd5sumuser\x00']}, 0x8c) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8036, 0xffffffffffffffff, 0x0) 10:26:45 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x81000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:26:45 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x42) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x3ff) 10:26:45 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:26:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x1fc, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newtclass={0x2c, 0x28, 0x20, 0x70bd28, 0x25dfdbff, {0x0, r7, {0xffff, 0xe}, {0xfff7, 0xfff2}, {0xe}}, [@TCA_RATE={0x8, 0x5, {0x9, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x4040801) 10:26:45 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000ab, 0x0) 10:26:45 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x86ddffff, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:26:45 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000002580)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f0000002600)=""/83, 0x53}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/82, 0x52}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)}, {&(0x7f00000037c0)=""/154, 0x9a}, {&(0x7f0000003880)=""/117, 0x75}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000003980)=""/218, 0xda}, {&(0x7f0000003a80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ac0)=""/189, 0xbd}, 0x8}, {{&(0x7f0000004b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004c00)=""/63, 0x3f}, {&(0x7f0000004c40)=""/157, 0x9d}, {&(0x7f0000004d00)=""/130, 0x82}, {&(0x7f0000004dc0)=""/227, 0xe3}, {&(0x7f0000004ec0)=""/138, 0x8a}], 0x5, &(0x7f0000005000)=""/20, 0x14}, 0xf4}], 0x3, 0x22, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000005100)={0x6d, 0x0, 0x8000}, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r1, &(0x7f0000002440)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/150, 0x96}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/229, 0xe5}], 0x4}, 0x7}, {{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/20, 0x14}, {&(0x7f0000000640)=""/206, 0xce}, {&(0x7f0000000740)=""/91, 0x5b}, {&(0x7f00000007c0)=""/49, 0x31}, {&(0x7f0000000800)=""/173, 0xad}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/194, 0xc2}], 0x8, &(0x7f0000000b00)=""/224, 0xe0}, 0xdc96}, {{&(0x7f0000000c00)=@generic, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c80)=""/23, 0x17}, {&(0x7f0000000cc0)=""/188, 0xbc}, {&(0x7f0000000d80)=""/7, 0x7}, {&(0x7f0000000dc0)=""/241, 0xf1}, {&(0x7f0000000ec0)=""/115, 0x73}, {&(0x7f0000000f40)=""/62, 0x3e}, {&(0x7f0000000f80)=""/152, 0x98}], 0x7, &(0x7f00000010c0)=""/156, 0x9c}, 0x6}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001180)=""/250, 0xfa}, {&(0x7f0000001280)=""/252, 0xfc}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x3, &(0x7f00000023c0)=""/118, 0x76}, 0x4}], 0x4, 0x60, &(0x7f0000002540)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f0000003780)) bind$isdn(r2, &(0x7f0000005140)={0x22, 0x81, 0xfffffffffffffffc, 0xffffffff00000000, 0x7}, 0x6) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:26:45 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000001800)={0x3, 0x70, 0x7, 0xa791, 0x2, 0x3, 0x0, 0x8, 0x0, 0x2, 0x5, 0xdbf, 0x9, 0x7fc0000000000, 0x33, 0xffff, 0x0, 0x9, 0x1000, 0x400, 0x100, 0x1, 0x5, 0x80, 0x100000001, 0x8, 0xd4e, 0x8001, 0x5cf, 0x480000000, 0x7, 0x2, 0x9c, 0x100000001, 0x5, 0xffffffffffffffc0, 0x1f, 0x5db8, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x81}, 0x20, 0x2, 0x800, 0x6, 0xebd, 0x4, 0x3c9d}, 0xffffffffffffffff, 0x4, 0xffffffffffffff9c, 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000001880)='/dev/vcsa#\x00', 0xad60f5c, 0x30100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001780)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/78, 0x4e}, {&(0x7f0000001480)=""/222, 0xde}, {&(0x7f0000000100)=""/2, 0x2}, {&(0x7f0000001580)=""/165, 0xa5}], 0x8, &(0x7f00000016c0)=""/181, 0xb5}, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000017c0), 0x4) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x3) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x4111, r3, 0x40000000000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x82a, 0x5d93, 0x1, 0x9, r4, 0x1}, 0x2c) 10:26:46 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88470000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:26:46 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000ac, 0x0) 10:26:46 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xe8800, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x7) 10:26:46 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88480000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 796.031011][T15155] QAT: Invalid ioctl 10:26:46 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0xa8, "14bfdfed18cb739fedcad62f1d18297a7358d4c7ecacefb0ea88789dce1995b7ae1c65237a922b577aaa1693f8a0f372b5ab67217ce342fce3da8990f837a601281d957281924b0834947cae27e1b19305fb3e27500965e9fddf564844454dcdbd6095d81427701979d003c3b38763dabb384c3e5d6d31f30a2cdf5bbdc715fc9c46d7891485fffe3ba632ad32741ef0f6d521b177f41d9a358d48c2edaa8b70092bf8f73a27821c"}, &(0x7f0000000000)=0xcc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) [ 796.067207][T15159] QAT: Invalid ioctl 10:26:46 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000ad, 0x0) 10:27:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88640000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:01 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101300, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000000c0)='eth0self\x00', 0x9) bind$netrom(r0, &(0x7f0000000040)={{0x3, @default, 0x4}, [@null, @default, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0xf) 10:27:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000ae, 0x0) 10:27:01 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80002, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x40) 10:27:01 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:27:01 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0cc32f9e1a6b48b11754260a96a98906da8d2aad1625bac639c342bbf6d403d8fd40f207fe0a0f2346dde87fc7fcd1dda478841b4117b33404f21e9d22ba7da472460fcc45b730518a063001cb1afb9200341c2e8f6ec6a9bdd403f0d3b3e876760a758d4f4fbb80945f943e513a794349"], &(0x7f0000000100)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) write$binfmt_misc(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) r5 = socket$xdp(0x2c, 0x3, 0x0) dup2(r5, r0) 10:27:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88a8ffff, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000af, 0x0) 10:27:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88caffff, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:01 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7416621e, 0x408000) perf_event_open(&(0x7f0000000000)={0xa9a0f9dad54f4dac, 0x70, 0x0, 0x6, 0x6ba, 0x5e9, 0x0, 0x11, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x0, 0x7, 0x401, 0x4, 0x0, 0x10000, 0x10001, 0x0, 0x1000, 0xffffffff00000001, 0x400, 0x4, 0x7, 0x9000000000000, 0xc000000000000000, 0x1000, 0x3, 0x4eb, 0x4, 0x3, 0xaf5, 0x4, 0xfffffffffffffe00, 0x1, 0x0, 0x6c3d, 0x0, @perf_config_ext={0x14, 0x5}, 0x402, 0x5, 0xef80, 0x1, 0x6, 0x7, 0x6}, r0, 0xf, r1, 0x3) 10:27:01 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) dup(r0) syslog(0xf, &(0x7f0000000080)=""/166, 0xa6) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:27:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b0, 0x0) 10:27:02 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x8032, 0xffffffffffffffff, 0x0) 10:27:02 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x89060000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b1, 0x0) 10:27:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:27:17 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0xb, 0x4, 0x4, "3e1ab0909fe8d2e078c7b3"}) 10:27:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfdffffff, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b2, 0x0) 10:27:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f00040000e1ff070000ff7f"], &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) getgroups(0x1, &(0x7f0000000300)=[0xee01]) fchownat(r2, &(0x7f0000000100)='./file0\x00', r5, r6, 0xd00) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r8 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r0) 10:27:17 executing program 0: mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x8032, 0xffffffffffffffff, 0x33) r0 = syz_open_dev$audion(&(0x7f0000000980)='/dev/audio#\x00', 0x81, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000009c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @remote}, 0x6}, @in6={0xa, 0x4e21, 0x0, @rand_addr="cab2ce083a745cf7cb9ad750dce81313", 0x1000}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @multicast2}], 0x78) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000a40)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000140)={0xfffffffffffffffe, @capture={0x1000, 0x1, {0x40, 0x9}, 0x400, 0x2}}) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000640)=""/93, 0x5d}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000740)=""/186, 0xba}, {&(0x7f0000000100)=""/2, 0x2}], 0xa, &(0x7f00000008c0)=""/84, 0x54}, 0x40) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80061) 10:27:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfeffffff, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b3, 0x0) 10:27:17 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2b, 0x4, 0x0, {0x5, 0x4, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) 10:27:17 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1000000008032, r0, 0x0) 10:27:17 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8034, r0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x93) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x80) 10:27:17 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x8034, r0, 0x0) 10:27:29 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b4, 0x0) 10:27:29 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xffffa888, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:29 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x600, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x2400, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000180)=0x9) fchmod(r0, 0x40) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x1000, 0x4) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000280)={0x5, 0x6d, &(0x7f0000000200)="d8bff02330521c8e4ef3274286ef01a704894a3a63929b44ded354ca7189fe7a32fe049c1d7df7cd11051742a62f053f078f111ebce1abe1ae2cb830d3bb184d8d9c896ac45ea475479cd761eaae44ee22ce4b57f4be0749bde1bed3bfac8c6f5c595270eb16d8cb75b4db11fb"}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) 10:27:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:27:29 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x6, 0x3, 0x6}, 0x8001, 0xffffffffffff0000}) 10:27:36 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xffffca88, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:36 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b5, 0x0) 10:27:36 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xcc, 0x400040) 10:27:36 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) connect$netrom(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:27:36 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xffffdd86, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) 10:27:36 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:27:36 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b6, 0x0) 10:27:36 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100)=""/149, 0x95) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:27:36 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffff000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:36 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:27:36 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b7, 0x0) 10:27:36 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:36 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b8, 0x0) 10:27:37 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x501000, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast1, @local, @empty, 0xe67, 0x7ff, 0x101, 0x500, 0x5, 0x1100010}) 10:27:37 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000b9, 0x0) 10:27:47 executing program 5: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) 10:27:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:27:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000ba, 0x0) 10:27:52 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x8, 0x4, 0xffffffffffffffe0, 0x5}) 10:27:52 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x0, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x13, r2, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e5667"], 0xe4) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = socket$xdp(0x2c, 0x3, 0x0) dup2(r6, r0) openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) 10:27:52 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0ffffffffffff, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:52 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x28000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) socket$l2tp(0x18, 0x1, 0x1) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1000000, &(0x7f0000000100)={[{@xino_on='xino=on'}, {@index_on='index=on'}, {@xino_off='xino=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}], [{@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel='seclabel'}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 10:27:52 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000bb, 0x0) 10:27:52 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x100, 0x0) recvfrom$packet(r0, &(0x7f0000000140)=""/137, 0x89, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000200)=""/212) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x3}, 0x28, 0x1) 10:27:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x3e, &(0x7f0000000780)=0x1, 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioctl(r0, 0x2, 0x0) syz_emit_ethernet(0x13f, &(0x7f00000000c0)={@broadcast, @dev={[], 0x22}, [], {@ipv4={0x800, {{0xc, 0x4, 0x9, 0x80000001, 0x131, 0x67, 0x6ad1, 0xd75, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x8, 0x2, [{0x5, 0x2}]}, @rr={0x7, 0xf, 0x2ff, [@dev={0xac, 0x14, 0x14, 0x22}, @loopback, @multicast2]}, @lsrr={0x83, 0x3}]}}, @udp={0x4e23, 0x4e22, 0x101, 0x0, [], "a8e5d7a07140eec23b4ec839ab7c4c55b56a72c470f09cfaaa005949495838383ff6470d73f42961388361522a4465df1ddff11ad1e67a135a16a6ab7312f618fdf22b832a3d6dba729824268869d74b29159b4e65e6619811cf4362ddf1d078c1c916da6ff59d7f689526bd62bd4aff6a7ed70823b55f5ebc8238b577cc26af8b7b3c4de705cfa484f616b0f18f7f04ca281aba990c1419f094ef66244e8f34e82c9cd7b70c608ae7ff0565d22fafcec45e6326b7fb791b0c72746f12e84ca8e36c4785658810c6d0b52d5ea7196ae38accaa8a2a9ec309e9b507473657cefc4240c95270087873a984587915b667b379c7597b897a8b5423"}}}}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) r3 = accept4(0xffffffffffffffff, &(0x7f0000001c00)=@l2, &(0x7f0000001c80)=0x80, 0x80000) connect$vsock_dgram(r3, &(0x7f0000001cc0)={0x28, 0x0, 0x2711, @reserved}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x10, &(0x7f0000000580)={&(0x7f0000000540)=""/1, 0x1, 0xffffffffffffffff}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b4e0d972e754cf960fd6d2817d977e008d539d6c0fdc428eb0f603b32bbc66f27dc5aaa3e8e8906a69263a874169fb654cb3a73b3c62a212c6774b08436846bcbd89da9dc88eac4942214d96d12085912d282370f5bcb517a1864e3eba8712f0a2f5bd738c776dcccfdc5060c377aec082d4265eaa5ccb5b882bc94d0d3cc2b09735ad2942ff04b249f3d6a90c8bd6d8ac6f0051908d8312873865967c0830dacd5b447498aa4ff3b7cfa1458f3e0eb40be29f976cfcc4d0e06bd62cdadb267f15947302ea63fec486787e11"], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000680)='cdg\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@local, @initdev, @initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000ce, r4}) 10:27:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0xfffffffffffffe00) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:27:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x200000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:27:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000bc, 0x0) 10:28:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000bd, 0x0) 10:28:09 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) uname(&(0x7f0000000080)=""/4096) pwrite64(r0, &(0x7f0000001080)="0aac14eb01aa8c43c290d090c102b1d81549cf25e46ec1bbe0cb8ee7e6d0b4b0e03cdb25517f565ec2439002369634a74a431c507dba73504791c8fa54592d36486edcb60abdde21ffd5cf1f8d9ae09278e017afe81e0290d0d61081f6f028bcb363ff18f1afb24cc8e7342cf028d900b5d77cbfddefd6d71ae2adf3cb4244227dbe195987b58e0b1cca", 0x8a, 0x0) 10:28:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:28:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 10:28:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x600000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:09 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000000000008002000040010000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f0000000980)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000cbef8a3685a859d1db043e8e40f99625f49965fb0088a9d35f19516678c88b67c53acf95422b2b0cfda835d1b74a3bb0c3c256993aeabd30929057246db4ea57bbbc76b505614c87b245f020c06111383fa267d1d47ab81a8f18a44e95db9758"], @ANYBLOB="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"], 0x4f8) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x3, 0x3, 0x7, 0x3, 0x454}, 0x8, 0x10000000, 0x5}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x40000008000, 0x9, 0x1f, 0x12e8, 0x6, 0x4, 0x5, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0xcc79, 0x2, 0x0, 0x8c70, 0x7fffffff}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x7, 0x30}, &(0x7f0000000200)=0xc) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000240)="e983c2a48d1b01a8d846836da887690fb0a46bf8f9f5d11e003f4129a889c28e63052ecf1114e73432443f65a320fde8fbaeec3bfab0311783eb50e896be0c540ec37cdb0b7d53663bdb29bcf5319c60c921ae71bc61b3dce2d7c0a921cf258f704aae467e658cf50699a20dbe697465583314514738ec59995a5237f0ace0a1bfea49595242436c0c382984f4f509f1ee598c2d9e778dd4a895ce3ff2c5d0587ffd347945ec2cdcc30b") mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000002000000, 0x41000008032, r0, 0xfffffffffffffffc) mknodat(r0, &(0x7f0000000940)='./file0\x00', 0x1000, 0x7fffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000840)=0x0) write$vhci(r0, &(0x7f0000000900)=@HCI_EVENT_PKT={0x4, "efd1ac4811bc1bb159ef2268a9c58220cab9df44030655b1a30acf"}, 0x1c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_open_procfs$namespace(r2, &(0x7f0000000880)='ns/cgroup\x00') prctl$PR_SVE_GET_VL(0x33, 0x10d10) 10:28:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000be, 0x0) 10:28:09 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x700000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:09 executing program 0: recvmsg(0xffffffffffffff9c, &(0x7f0000001780)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000000640)=""/32, 0x20}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x9, &(0x7f0000001740)=""/62, 0x3e}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000017c0)={0x0, 0x51, "41969dd6cb111534bb5e89e8839f00e9ec61a8be3b1a27f57fd157f023ac95f3c6d0720f29225d6edf531a026b1c764ba38bc2db49d223ad8fe6bba862f88a810c68a205e9d29ab87da436cb5dbc391b3b"}, &(0x7f0000001840)=0x59) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001880)={r1, 0x1}, &(0x7f00000018c0)=0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x0, 0x5, 0x0, 0x2, 0x80000000, 0x800, 0x0, 0xdf8b, 0x0, 0x10000, 0x6, 0x6, 0x800, 0x3, 0x11, 0xc}}) 10:28:09 executing program 3: arch_prctl$ARCH_GET_CPUID(0x1011) accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000019c0), 0x0, 0x0, 0x0) 10:28:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000bf, 0x0) 10:28:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:28:29 executing program 0: mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x8013, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0xfffffffffffffd42) 10:28:29 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:29 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c0, 0x0) 10:28:29 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:28:29 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:28:30 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c1, 0x0) 10:28:30 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x6) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x3, 0x0) 10:28:30 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x806000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:30 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/202) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) 10:28:30 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:28:30 executing program 0: mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000000f, 0x8032, 0xffffffffffffffff, 0x0) 10:28:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c2, 0x0) 10:28:50 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:28:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:50 executing program 0: socket$bt_cmtp(0x1f, 0x3, 0x5) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x20042) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) 10:28:50 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x7, 0x7a, &(0x7f0000000000)="2facdda4ceae29263afc7e4b187f5a21cbc28dd5512f9395c899fa57affc9ba38e81b09794cb7d01aebc77498b522d5f905c078d8b9da5919e3303b04ff04663cfe653895f48fb8a8dacf10d087a82b9aa152cadee5c18272770b2d2e92f495a520ff0108842a3cb838ce0af2272cb85bc7dbdd7dac6e96f196b", 0xe1d, 0x4, 0x8001, 0x8, 0xee35, 0x1, 0x4, 'syz1\x00'}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 10:28:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:28:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c3, 0x0) 10:28:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:50 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x10, 0x40010, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) ioprio_set$uid(0x3, r0, 0x1) 10:28:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c4, 0x0) 10:28:50 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:28:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1400000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:28:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c5, 0x0) 10:28:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) utimensat(r3, 0x0, 0x0, 0x0) 10:28:50 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x14, 0x8, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}}}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000340)={0x1, 0x0, {0x100, 0xbd, 0xfffffffffffffffb, 0x10000}}) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f8, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x478}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbbde}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffff2d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf5a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd1f0}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x7, 0x1b49663d, @remote, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8000}, 0x881) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000380)={0x11, 0x4, 0x32, "4f91174e4dd129b16e65b65c64369e5a09924606e69f70c9c03e73e4849999f706190c007d46d0c7ed42a50b3187dfbfcd1d729c14adf26006aae56c", 0x12, "5d13a49f70254c902abca599dfe55272e37ddca9adc2954e263cff3175d4385cabbfa1219378a20cac06206d135fed2832c28217ac9af560b72d0bd1", 0x20}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000580)={0x1, 0xf4db, 0x9, 0x864}, 0x8) 10:28:50 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) 10:29:10 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) fsync(r0) 10:29:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:10 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) 10:29:10 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001340)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001300)=[{&(0x7f00000000c0)="26cfbf0b6ac854c9e08b4373cab3221334e6fd4cc0df89691bd3158d28e92ce4e66a5d9582789833f7159baa6dcaf53b1d4194fa94d2d3c079da63c8eb99060449c0c3c4d61b8b5943a516eefd342dc492e0f1f2cfa15c482f0c4f2eff6fc4eae53aa898ce0af8c64eb9f83dad3ae54d3d6e76df92159b1ee27af2de625ff1641bfc582af61bfd8ce20a9a4ada4a579983c25e2f98799fc5a1772b8d24004bca822be786a970e4966c612f58a943990ee6d193f849dda7b4b6bb3822d216c41d8b8b2036ca2eacffd905cb0ed6664c8779d57b2d", 0xd4}, {&(0x7f00000001c0)="920995ec6dc5fcc9d791df0766eaccbc5b628deb1f2a25260b23903831a37f697197cf7c14a3d5a6482cb8988f3e40ca88541cf004d7257b00c00d19ad3cce9180169dca9e88848a5dac16198061d14457ec95c19bdde86e30d27f1aad2799c6e50421c6091023275972bb9c9e8ddbd8ba60eaa324075f7e8a9de2b7cadde21c08a0146c0331a33f5f4c71a0be10423e70f5226c55d9e5dbd08e63639ec8a759a9f1d7160be14dab0a9acd9832842cf48171555e6fbb0b0cb3f96923952a2790d1c43fb559ecfcded03c8f", 0xcb}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="b25d0e68310bc9060248ecc9a60dcf50adec0496", 0x14}], 0x4, 0x0, 0x0, 0x8004}, 0x80) 10:29:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c6, 0x0) 10:29:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:29:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c7, 0x0) 10:29:10 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) 10:29:10 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x8000000000000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) getgid() sync_file_range(0xffffffffffffffff, 0x3, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x7a00000000000000) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000040)={0xe, @vbi={0x0, 0x4, 0x9, 0x77724e4f, [0x3, 0x100000001], [0x1bf, 0x98], 0x108}}) 10:29:10 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8033, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xec45b728c348f169}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x80}}, 0x10) 10:29:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3f00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c8, 0x0) 10:29:10 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 10:29:10 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x145200, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0x6}}, [0x9d2, 0x0, 0xb79, 0x193b, 0x6be, 0x1000, 0x5, 0x5, 0x2, 0x6, 0x6c3e, 0xce24, 0x5, 0x9, 0x3f]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x6, @rand_addr="3bb241ace3591a8bf5f51b9773c6729f", 0x12c7bb3e}}, [0x7e, 0x100000001, 0x400, 0x9, 0x7, 0x2, 0x7fff, 0x2e, 0x1ff, 0x80000000, 0x8, 0x7f, 0x4, 0xff, 0xd126]}, &(0x7f0000000280)=0x100) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) 10:29:10 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:10 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000c9, 0x0) 10:29:30 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:29:30 executing program 5: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b802c, 0x1b00) r0 = open(&(0x7f0000000000)='./bus\x00', 0x400000003fd, 0x0) write(r0, &(0x7f0000000300)="6d4c87", 0x3) execve(0x0, 0x0, 0x0) 10:29:30 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 10:29:30 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) prlimit64(r0, 0xf, &(0x7f0000000040)={0x834, 0x5}, &(0x7f0000000080)) tee(r1, r2, 0x7fffffff, 0xf) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:29:30 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:30 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000ca, 0x0) 10:29:30 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 10:29:30 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:30 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000cb, 0x0) 10:29:31 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x1) 10:29:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000008c0)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x10000}, 0x20) 10:29:31 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:29:51 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:29:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000cc, 0x0) 10:29:51 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="90853856a63efcf2dafd59dbb3ccfeb6a287", 0x12) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 10:29:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000080)={0x5, 0x5, 0x0, [{0xffffffffffffff80, 0x4, 0x6, 0x4, 0x727c, 0x10001, 0x5}, {0x3, 0x1, 0xbfcf, 0x7, 0x6, 0x7, 0x817}, {0x1, 0x7, 0x89ee, 0x7ff, 0x8, 0x2, 0x1f}, {0x2, 0x2, 0x8, 0x81, 0x8, 0x262, 0x7ff}, {0x8, 0x9, 0x1, 0x1, 0x1, 0x4, 0x20}]}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x100) 10:29:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800e000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:51 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:29:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000cd, 0x0) 10:29:51 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:29:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:29:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8035000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x10001, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$getown(r1, 0x9) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x7, 0x8, 0xb, 0x8000, 0x3}) readv(r0, 0x0, 0xffffffffffffff65) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 10:29:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000ce, 0x0) 10:29:51 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x101040) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x8, 0x5167}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x400000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) 10:29:51 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:29:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000cf, 0x0) 10:29:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:29:51 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x4000, 0x0) bind$netrom(r0, &(0x7f0000000040)={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 10:29:51 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:29:51 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @random="2869f95f2511", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) 10:29:51 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d0, 0x0) 10:30:11 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:30:11 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d1, 0x0) 10:30:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000180)=@bpq0='bpq0\x00', 0xbbe31ddc1f5ff719) 10:30:11 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x86ddffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:11 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:30:11 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x14a, 0x80080) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2286, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x80000001, 0x9}, 'port0\x00', 0x12, 0x400, 0x2, 0x5ad5, 0x3ff, 0xfffffffffffffffd, 0x9, 0x0, 0x2, 0x800}) 10:30:11 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:30:12 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:30:12 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8847000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d2, 0x0) 10:30:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d9a34fff2d847238de8a96cedb1af0ab", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/176, 0xb0}], 0x1}}], 0x1, 0x0, 0x0) 10:30:12 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000040)=0x5) 10:30:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d3, 0x0) 10:30:12 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:30:12 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8848000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:12 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x80) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:audit_spool_t:s0\x00', 0x23, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x81}, 0x2) ioctl$RTC_UIE_ON(r0, 0x7003) 10:30:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d4, 0x0) 10:30:33 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8864000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:33 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x7fffffff, 0x3a87, 0xa, 0xb7a, 0x3, 0x5, 0x7d4b, 0x80000001}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000640)='/dev/input/mouse#\x00', 0x7, 0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x3}, &(0x7f0000000680)) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x3ff, 0x7, 0x0, 0x7ff}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r3, 0x1, 0x100000001}, 0x8) 10:30:33 executing program 5: r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x63, &(0x7f00000002c0)={&(0x7f0000003080)={0x14, 0x1e, 0x301}, 0x14}}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x1e2) 10:30:33 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:30:33 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc8280, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x8032, r0, 0x0) fcntl$notify(r0, 0x402, 0x80000009) 10:30:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x92200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:30:33 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d5, 0x0) 10:30:33 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 10:30:33 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88a8ffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:33 executing program 0: r0 = eventfd(0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000740)={0x200, 0x3, 0x0, {0x6, @pix={0xfffffffffffffff9, 0x10001, 0x20323159, 0x0, 0x80, 0x7, 0x3, 0x3, 0x1, 0xf, 0x0, 0x7}}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0xfffffffffdfffffe) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='/dev/cec#\x00', &(0x7f0000000100)='.\x00', &(0x7f0000000140)='/dev/cec#\x00', &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='/dev/cec#\x00', &(0x7f0000000200)='^(security\\-{security.\xf5\xaf\x00', &(0x7f0000000240)='/dev/cec#\x00'], &(0x7f0000000540)=[&(0x7f00000002c0)='*!\x00', &(0x7f0000000300)='/dev/cec#\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='[wlan0trusted\x00', &(0x7f00000003c0)='/dev/cec#\x00', &(0x7f0000000400)='-em1self}:wlan0ppp0^{\x00', &(0x7f0000000440)='\xf0eth0(\x00', &(0x7f0000000480)='/dev/cec#\x00', &(0x7f00000004c0)='/dev/cec#\x00', &(0x7f0000000500)='/dev/cec#\x00'], 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000640)={0x0, 0x9}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000006c0)={r2, 0x3ff}, &(0x7f0000000700)=0x8) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000840)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) 10:30:33 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d6, 0x0) 10:30:33 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 10:30:33 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88caffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d7, 0x0) 10:30:54 executing program 5: socket(0x0, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x316) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) timer_gettime(r0, &(0x7f0000000280)) 10:30:54 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 10:30:54 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/51, &(0x7f00000000c0)=0x33) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000526bd7000fcd2df25040000002800030008000500ac1e010114000600ffe1ffffffffffff1f000000000000010800080008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 10:30:54 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8906000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:54 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000c0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="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", 0xfb}], 0x1, &(0x7f0000000180)="34b801c4d3faf5065415191461659eb1ce267576b2d8c7abdc4dbe07f8a3a0cfa2aea3cbec11cb8434adf7ae0d5ea808293ba18fd8f2f62357ad000cdab4db600392f36c12c781de41c2c7c4a1e4a84109b393a6c83f4538acdc4ab532813ca79781c198cba52a6ab8a86001b46f2cb416285cac75959ce12d32d9d5f0d39d81c668cc7bcfd223218b5b31ddede45739ea7c3bd92d27c7f8384a67e0a85887da5ed6d56b5011e00271ee59763ef1f20840320d9088edbae912", 0xb9, 0x24000000}, 0x4000080) 10:30:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d8, 0x0) 10:30:54 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:30:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 10:30:54 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000480)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$security_smack_entry(r0, &(0x7f0000000240)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) close(r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 10:30:54 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfdffffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000d9, 0x0) 10:30:55 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x880, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, r0, 0x0) 10:30:55 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfeffffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:30:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 10:30:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000da, 0x0) 10:30:55 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) 10:30:55 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) 10:30:55 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:15 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000db, 0x0) 10:31:15 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) 10:31:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 10:31:16 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x6a8000, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)=""/180, &(0x7f0000000100)=0xb4) 10:31:16 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:16 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707571c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc000000000000000000000000003aa7f2a3"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:31:16 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 10:31:16 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x2010, r0, 0x0) 10:31:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) 10:31:16 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x3, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:16 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000dc, 0x0) 10:31:16 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 10:31:16 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x204902) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="e2241c8dd6374f35dcb91f8d4b2381599c4ce27ec8022f15776da7321c3cdc910a22508683a0e1267ac0bfd9f32b580b311b8d088d8c194bfc1010e2e41eeaeaa6ced3bc8d965e2f6988af7c00938b6da31f3db972a853301d268e84e51698fd210693639c6f6fb576d533b3beda72d3a131827b7e3b151ca9ed63c493a111b8befcf9a54e5984c661b5e5243391c3439000c9195e13217d440788") 10:31:16 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:16 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0xfffffffffffffff9}]}}) 10:31:16 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000dd, 0x0) 10:31:16 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 10:31:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000de, 0x0) 10:31:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:31:37 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={r1, &(0x7f00000000c0)=""/24}) 10:31:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@routing, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca5d2526c35738d9308f00000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x5ad) 10:31:37 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:37 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0xfffffffffffffffc) 10:31:37 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:31:37 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000df, 0x0) 10:31:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr="88cd4aad8d0f6268e85ac66e2c372655", @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x400000}) 10:31:37 executing program 3: gettid() ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 10:31:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e0, 0x0) 10:31:37 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xb, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:37 executing program 0: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x2, 0x13, 0x6cb, 0x9, "fe102b56451892bceab5d411a381e23033ecc909d7897435da285cc86a21ec82"}) 10:31:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a060501ff0080fffd050012000000000c000100000000007d0a06010c000200070009fd06f14b52"], 0x2c}}, 0x0) 10:31:37 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xd, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e1, 0x0) [ 1087.683035][T18535] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 10:31:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80200, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) process_vm_readv(0x0, 0x0, 0xffffffffffffff8b, &(0x7f0000000180), 0x10000000000000a3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000800)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @local}, 0x102, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)='rose0\x00', 0x3, 0xfffffffffffff801, 0xfd8}) preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000010d, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40202000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000040)) 10:31:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x14, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x2e7) connect$inet6(0xffffffffffffffff, 0x0, 0x2f) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x5100) 10:31:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000380)) 10:31:58 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:31:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e2, 0x0) [ 1108.193879][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:31:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x28, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e3, 0x0) 10:31:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003780)={'veth1_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x29c}]) 10:31:58 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000680)='./file0\x00') pwrite64(r0, 0x0, 0x0, 0x0) 10:31:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e4, 0x0) 10:31:58 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:59 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e5, 0x0) 10:31:59 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:31:59 executing program 3: r0 = socket(0x2, 0x3, 0x67) sendmsg$unix(r0, &(0x7f0000001b40)={&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0}, 0x0) 10:31:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='w'], 0x1, 0x0) msgrcv(r1, &(0x7f0000001180)=ANY=[], 0x0, 0x3, 0x2000) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000480)) 10:31:59 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e6, 0x0) [ 1109.214322][T18809] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 10:32:19 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80200, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) process_vm_readv(0x0, 0x0, 0xffffffffffffff8b, &(0x7f0000000180), 0x10000000000000a3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000800)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @local}, 0x102, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)='rose0\x00', 0x3, 0xfffffffffffff801, 0xfd8}) preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000010d, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40202000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000040)) 10:32:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x7, 0x100000000, 0x5}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) preadv(r1, &(0x7f0000000380)=[{0x0, 0x33d}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x5, [0x0, 0x800, 0x0, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x12) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000480)='/dev/md0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) socket$xdp(0x2c, 0x3, 0x0) 10:32:19 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, r0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x62eb1200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x51) 10:32:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e7, 0x0) 10:32:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x300, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:32:19 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 10:32:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x543, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:32:19 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x8000) socket$caif_seqpacket(0x25, 0x5, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, r0, 0xfffffffffffffffd) 10:32:19 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) flock(r0, 0xffffffffffffffbd) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc5b}], 0x108d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e8, 0x0) 10:32:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x600, 0x6, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:32:19 executing program 0: 10:32:19 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES16], 0x1b3aeb010e0a5127) unlink(&(0x7f00000001c0)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0xfffffc6e) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_capability(r0, &(0x7f0000000140)='security.capability\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000100)='.\x00', 0x0, 0x1000, 0x0) 10:32:20 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80200, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x8032, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) process_vm_readv(0x0, 0x0, 0xffffffffffffff8b, &(0x7f0000000180), 0x10000000000000a3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000800)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @local}, 0x102, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)='rose0\x00', 0x3, 0xfffffffffffff801, 0xfd8}) preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000010d, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40202000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000040)) [ 1136.090797][ T1049] BUG: unable to handle kernel paging request at fffff10843ffe200 [ 1136.098652][ T1049] #PF error: [normal kernel read fault] [ 1136.104203][ T1049] PGD 0 P4D 0 [ 1136.107580][ T1049] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1136.112781][ T1049] CPU: 1 PID: 1049 Comm: khugepaged Not tainted 5.1.0-rc2-next-20190327 #12 [ 1136.121453][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.131547][ T1049] RIP: 0010:set_pfnblock_flags_mask+0x6c/0x360 [ 1136.137703][ T1049] Code: 35 39 8b be 08 48 85 f6 0f 84 c6 01 00 00 48 89 d7 48 c1 ef 16 48 8d 1c fe 48 be 00 00 00 00 00 fc ff df 48 89 df 48 c1 ef 03 <80> 3c 37 00 0f 85 8e 02 00 00 4c 8b 33 4d 85 f6 74 0a 83 e0 7f 48 [ 1136.157310][ T1049] RSP: 0018:ffff8880a83bf0a8 EFLAGS: 00010a06 [ 1136.163386][ T1049] RAX: 0001fc0000000009 RBX: ffffa8421fff1000 RCX: 0000000000000003 [ 1136.171366][ T1049] RDX: fe0000000004f800 RSI: dffffc0000000000 RDI: 1ffff50843ffe200 [ 1136.179337][ T1049] RBP: ffff8880a83bf0f8 R08: 0000000000000001 R09: ffffed1015d25bd0 [ 1136.187320][ T1049] R10: ffffed1015d25bcf R11: ffff8880ae92de7b R12: 0000000000000001 [ 1136.195301][ T1049] R13: 0000000000000001 R14: ffff8880a83bf550 R15: 7fffea00013e0000 [ 1136.203292][ T1049] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1136.212222][ T1049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1136.218826][ T1049] CR2: fffff10843ffe200 CR3: 00000000a59d5000 CR4: 00000000001406e0 [ 1136.226798][ T1049] Call Trace: [ 1136.230098][ T1049] ? kasan_check_read+0x11/0x20 [ 1136.234964][ T1049] compaction_alloc+0x1b02/0x2290 [ 1136.240001][ T1049] ? isolate_freepages_block+0xd40/0xd40 [ 1136.245661][ T1049] ? trace_hardirqs_on+0x67/0x230 [ 1136.250696][ T1049] migrate_pages+0x484/0x2cd0 [ 1136.255386][ T1049] ? __ClearPageMovable+0x250/0x250 [ 1136.260590][ T1049] ? isolate_freepages_block+0xd40/0xd40 [ 1136.266228][ T1049] compact_zone+0x1b56/0x38d0 [ 1136.270930][ T1049] ? compaction_suitable+0x3b0/0x3b0 [ 1136.276226][ T1049] compact_zone_order+0x1af/0x2a0 [ 1136.281255][ T1049] ? compact_zone+0x38d0/0x38d0 [ 1136.286126][ T1049] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1136.291855][ T1049] try_to_compact_pages+0x268/0xaf0 [ 1136.297075][ T1049] __alloc_pages_direct_compact+0x154/0x4d0 [ 1136.303071][ T1049] ? get_page_from_freelist+0x4120/0x4120 [ 1136.308801][ T1049] ? __isolate_free_page+0x4c0/0x4c0 [ 1136.314118][ T1049] ? mutex_unlock+0xd/0x10 [ 1136.318540][ T1049] ? drain_all_pages+0x408/0x590 [ 1136.323492][ T1049] __alloc_pages_slowpath+0xb14/0x2900 [ 1136.328971][ T1049] ? warn_alloc+0x110/0x110 [ 1136.333493][ T1049] ? find_held_lock+0x35/0x130 [ 1136.338267][ T1049] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1136.343906][ T1049] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1136.350159][ T1049] ? should_fail+0x1de/0x852 [ 1136.354763][ T1049] ? __isolate_free_page+0x4c0/0x4c0 [ 1136.360052][ T1049] ? ___might_sleep+0x163/0x280 [ 1136.364919][ T1049] __alloc_pages_nodemask+0x57e/0x7e0 [ 1136.370288][ T1049] ? find_held_lock+0x35/0x130 [ 1136.375056][ T1049] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1136.380777][ T1049] ? kasan_check_write+0x14/0x20 [ 1136.385715][ T1049] ? lock_downgrade+0x880/0x880 [ 1136.390564][ T1049] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1136.396386][ T1049] khugepaged_alloc_page+0x96/0x160 [ 1136.401621][ T1049] collapse_huge_page+0x130/0x3f60 [ 1136.406753][ T1049] ? khugepaged+0x289f/0x3f40 [ 1136.411435][ T1049] ? __collapse_huge_page_swapin+0xe70/0xe70 [ 1136.417420][ T1049] ? kasan_check_write+0x14/0x20 [ 1136.422368][ T1049] ? lock_downgrade+0x880/0x880 [ 1136.427222][ T1049] ? __pte_alloc_kernel+0x220/0x220 [ 1136.432420][ T1049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1136.438663][ T1049] ? khugepaged_find_target_node+0x142/0x180 [ 1136.444643][ T1049] khugepaged+0x28c3/0x3f40 [ 1136.449166][ T1049] ? collapse_huge_page+0x3f60/0x3f60 [ 1136.454601][ T1049] ? finish_wait+0x260/0x260 [ 1136.459197][ T1049] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1136.464485][ T1049] ? trace_hardirqs_on+0x67/0x230 [ 1136.469515][ T1049] ? kasan_check_read+0x11/0x20 [ 1136.474388][ T1049] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1136.480205][ T1049] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1136.486449][ T1049] ? __kthread_parkme+0xfb/0x1b0 [ 1136.491393][ T1049] kthread+0x357/0x430 [ 1136.495467][ T1049] ? collapse_huge_page+0x3f60/0x3f60 [ 1136.500838][ T1049] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1136.507080][ T1049] ret_from_fork+0x3a/0x50 [ 1136.511518][ T1049] Modules linked in: [ 1136.515410][ T1049] CR2: fffff10843ffe200 [ 1136.519565][ T1049] ---[ end trace 5b33e841676d0494 ]--- [ 1136.525059][ T1049] RIP: 0010:set_pfnblock_flags_mask+0x6c/0x360 [ 1136.531216][ T1049] Code: 35 39 8b be 08 48 85 f6 0f 84 c6 01 00 00 48 89 d7 48 c1 ef 16 48 8d 1c fe 48 be 00 00 00 00 00 fc ff df 48 89 df 48 c1 ef 03 <80> 3c 37 00 0f 85 8e 02 00 00 4c 8b 33 4d 85 f6 74 0a 83 e0 7f 48 [ 1136.550830][ T1049] RSP: 0018:ffff8880a83bf0a8 EFLAGS: 00010a06 [ 1136.556902][ T1049] RAX: 0001fc0000000009 RBX: ffffa8421fff1000 RCX: 0000000000000003 [ 1136.564885][ T1049] RDX: fe0000000004f800 RSI: dffffc0000000000 RDI: 1ffff50843ffe200 [ 1136.573131][ T1049] RBP: ffff8880a83bf0f8 R08: 0000000000000001 R09: ffffed1015d25bd0 [ 1136.581103][ T1049] R10: ffffed1015d25bcf R11: ffff8880ae92de7b R12: 0000000000000001 [ 1136.589101][ T1049] R13: 0000000000000001 R14: ffff8880a83bf550 R15: 7fffea00013e0000 [ 1136.597081][ T1049] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1136.606015][ T1049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1136.612602][ T1049] CR2: fffff10843ffe200 CR3: 00000000a59d5000 CR4: 00000000001406e0 [ 1136.620577][ T1049] Kernel panic - not syncing: Fatal exception [ 1136.627500][ T1049] Kernel Offset: disabled [ 1136.631864][ T1049] Rebooting in 86400 seconds..