0x7f0000000380)={0x0, 0x80}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r1}, &(0x7f0000000440)=0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x8000) accept4$unix(r4, 0x0, &(0x7f00000002c0), 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400002, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000100)={0xfffffffffffffff7, @random="881730b53919"}) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c650017000000000000000000000000000000000000000000000000640000009c755149f274badc4cbce8c3886171aa74cc46c7dc4f1065920b8eb8ba6951ac1ef52a6881f8af977674a2c8f8923b5bb337246bc5c3f04cbb31bd3aa5ef71634642e91d377d14cd232849f5e108fdd230aa161d12"], &(0x7f0000000040)=0x88) r6 = dup2(r2, r3) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000480)=""/197) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000300)=0x200) 06:48:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20840, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2000, 0x0) dup2(r2, r1) 06:48:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf, 0x8080fffffffe) [ 275.519698][T26766] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 06:48:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="cc010106d0010000700000000600000019000000643400000000000000000000662ab8f7edd0e462d12424111e724636904fa76cd7e263be406e207d5a577fb0b1d8253737c71c04fd0b4f411ab4de1557d844d91cba619c1021b55fe08e30bb019ad1a32d137ba905d7c714d9e60bf5c953451f3bbd5195ad0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1913], 0x779) 06:48:51 executing program 0: r0 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x100, 0x40) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)=0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4000, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x400000) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000400)={0x0, 0x4, 0x2, 0x1, &(0x7f0000ffc000/0x4000)=nil}) sendfile(r3, r2, &(0x7f0000000040), 0x485) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000380)) dup2(r2, r5) 06:48:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x220000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e21, 0x779, @remote, 0xffffffffffffff81}, r2}}, 0x38) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb4, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="e52564a457b8f7ccb9267d4170c7cef7"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x20000) ioctl$RTC_AIE_ON(r2, 0x7001) dup2(r0, r1) [ 275.847228][T26894] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 275.858006][T26894] FAT-fs (loop1): Filesystem has been set read-only [ 275.865974][T26894] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 06:48:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x7fffffff, 0x5, 0x4, 0x4000, {r2, r3/1000+30000}, {0x6, 0xc, 0x5, 0x7fff, 0x80, 0x83e8, 'SN9\a'}, 0x80000001, 0x3, @planes=&(0x7f0000000100)={0x4, 0x101, @userptr=0xae4, 0xff}, 0x4}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 06:48:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) r4 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) r11 = getegid() stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x1}, [{0x2, 0x0, r3}, {0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x6, r6}, {0x2, 0x4, r7}, {0x2, 0x0, r8}], {0x4, 0x1}, [{0x8, 0x7, r9}, {0x8, 0x4, r10}, {0x8, 0x3, r11}, {0x8, 0x1, r12}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x3) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r13}) [ 275.900516][T26990] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 275.957655][T26990] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 06:48:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000209, 0x1, 0xffffffffffffffff}) dup2(r0, r2) 06:48:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000207, 0x1, 0xffffffffffffff9c}) dup2(r0, r1) [ 276.004480][T27225] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 276.005104][ T26] audit: type=1804 audit(1554360531.540:58): pid=26894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/168/file0/file0" dev="loop1" ino=28 res=1 [ 276.022447][T27225] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 06:48:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x8080fffffffe) 06:48:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x220840) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0x14) r2 = dup2(r0, r0) mkdirat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x1ff) 06:48:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x47f5, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x100, 0x9, 0x400, 0x1, 0x0, 0x1, 0x108, 0x2, 0x2, 0x0, 0x8, 0x3, 0x8, 0x5, 0x2, 0x2, 0x100000000, 0x9, 0x6dd, 0x80000000, 0x3ff, 0x0, 0x5, 0x20, 0xfff, 0x6a54, 0x1, 0x0, 0xfd0, 0x4, 0xe44, 0x1, 0x0, 0x8, 0x9f2, 0x14c6, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x100}, 0x21000, 0x5, 0x10001, 0x7, 0xfffffffffffffeff, 0x9401, 0x3}, r1, 0xa, r2, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:51 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200) r5 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x85051, 0xffffffffffffff9c, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x8}, @increfs_done={0x40106308, r5}, @acquire_done={0x40106309, r6, 0x4}, @enter_looper, @clear_death], 0x4, 0x0, &(0x7f0000000040)=')c?5'}) r7 = dup2(r2, r3) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000240)) 06:48:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80040, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x1, 0xe8f, 0x1, 0x2, 0x4, 0x8001, 0x8, 0x9, 0x5, 0x8, 0x3, 0xfffffffffffff04c, 0x10000, 0x4, 0x1d, 0x10}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x202, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000200)=""/243) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:51 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000200)="a2b291f00237f8603a3fea343ad5074b01797a88f273459b176de129f2653de98247ab54e12ff8420d1b246f052d7717ba89bb1e73", 0x35, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$instantiate(0xc, r2, &(0x7f0000000240)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '{'}, 0x1a, r4) dup2(r0, r1) 06:48:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@deltfilter={0x13c, 0x2d, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, r3, {0xfff3, 0x9}, {0xf, 0xffff}, {0xc, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0xe8, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xe}}, @TCA_FW_ACT={0xc8, 0x4, @m_vlan={0xc4, 0x1e, {{0xc, 0x1, 'vlan\x00'}, {0x78, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x0, 0x5, 0x8001}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xb70}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xfc7}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x888}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfd68, 0xfffffffffffffff9, 0x6, 0x4, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x3, 0x7f4b, 0x1000}, 0x3}}]}, {0x38, 0x6, "fabd9abe89cb42e68abae6190a3353901d8c28766604ebf4efaf4b1d0d04a8ea39e442d80c91376541a68eb667ee990e65556e"}}}}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}]}}, @TCA_RATE={0x8, 0x5, {0xfff, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_CHAIN={0x8, 0xb, 0x20}, @TCA_RATE={0x8, 0x5, {0x6, 0x3}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 06:48:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x200, 0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0x7, r3}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x40c00, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") r6 = getpid() kcmp(r1, r6, 0x0, r0, r0) r7 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xfffffffffffffb88, 0xa0000) connect$l2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x2, 0x0, {0xa, 0x4e23, 0x3, @local, 0x75}}}, 0x32) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r9 = dup2(r0, r8) ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f00000005c0)='vcan0\x00') rt_tgsigqueueinfo(r1, r6, 0x7, &(0x7f0000000280)={0x17, 0x2092, 0x9}) 06:48:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x82000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0xffffffffffffff81}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:48:52 executing program 5: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00') r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:48:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x12, 0x8080fffffffe) 06:48:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) keyctl$session_to_parent(0x12) socket$nl_xfrm(0x10, 0x3, 0x6) 06:48:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000000)) 06:48:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x7, 0x9) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0x7}, &(0x7f0000000100)=0x90) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000209, 0x1, 0xffffffffffffffff}) dup2(r0, r1) [ 277.139419][ T26] audit: type=1804 audit(1554360532.680:59): pid=27464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/169/file0/file0" dev="sda1" ino=17185 res=1 [ 277.164027][ T26] audit: type=1804 audit(1554360532.680:60): pid=27464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/169/file0/file0" dev="sda1" ino=17185 res=1 06:48:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sync_file_range(r3, 0x391, 0x9, 0x3) setreuid(r4, r5) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x50000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@gettaction={0x84, 0x32, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0xe50}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x18, 0x8, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x18, 0x8, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) dup2(r0, r3) 06:48:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$KDSKBLED(r2, 0x4b65, 0x4) 06:48:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:48:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x210000, 0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:48:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x44a200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r2, r1) 06:48:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000200)) 06:48:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000200)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x63) arch_prctl$ARCH_SET_GS(0x1001, 0x7) dup2(r0, r1) 06:48:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000200)={0x2, 0x400, 0x7, 'queue0\x00', 0x100}) fremovexattr(r1, &(0x7f0000000040)=@random={'osx.', 'queue0\x00'}) sendmmsg$alg(r2, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000002c0)="d786ff6ff634735913003901ad9c6c9b673d8c8f0b5e19cf0f6432b5a0604a09170273870bad85749299f821ba4e2cb4ed4d712257310de3af8b96aaa3ca36190fb416165709c50d9ed8ba14c88a3485b247b03a8f04c2b4580f56253874273c69cedb14006894f77ca01bd9aa0c12a4e541c4fce344ce38845d27e4aff35cc079a3eceb6b0320927fafea284b640f6738a8f07ab77c3319798d2cbe4e1d8ddc1aba04460c182e2d80acfd392ad17d1fd58446b4e67c4b024db5eb9ad375b8d9", 0xc0}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000100)='C', 0x1}, {&(0x7f0000001380)="8fbf8b98547cc835ff1b16fd9d55bdcc6d832e291f17bb2424190a90525b066e262dbd7290dcb053d04f8ee514189d6276dd798230ac9b6b252d94a7e6f28ef9cb511da0a9b05c44d6886e148a5507854b8d4be93ba90de778545f41384a0e9b01cc3ad11bfa3d988dcaf87853accfe043eae30fb87e574df5bc5691d478213577b84660d21242f905042f936ad0df2cbb493cd49ac20a40af205318c6507cd5c66685109e5b3a91ade702a1afa94d1ddbffb8678d4bb01b9adbda", 0xbb}, {&(0x7f0000000140)="442a95cadc78ad5b6df4060d5cc6897fe3ee", 0x12}, {&(0x7f0000001440)="656033f4abee61c4805d4bfd9a01225fb7be645e0dcdea799d6b2c85bb3b118db0535cdac3c6d2e61174f6b215dd1d8eab8a8a9b72288ca968e887ac91336cbfa21fe5741565b1302e480221454447c3abf7584144a388bc583ff68a554544eb5b05db3bd6346d3d1a14d49c2c0314995f310f70f3d2625fddc71a253093e3b9807c5c5e498b4821d3b59dc062460967bcfb86f50badb3fe4654b6d24d03b1b6337c4bd307", 0xa5}, {&(0x7f0000001500)="017ff8e6acd7b2ef90bfe7698285e502bb9d3bbbc35d2c74f7417689e4f9b42fba0a84ce", 0x24}, {&(0x7f0000001540)="115dac4a03f8eae6cdf2c136ae6c743c38279a437d77ec97d3b74f09e3bf08380e36fdc6c7dd2cfed81b3e3ecf3230433fd1c062df630ac7d5157c0650e526acf800117942e2022de935148689", 0x4d}, {&(0x7f00000015c0)="d27a136fb6f7af4d4e040dc83037d774c1f8a48560c3278c5f2cbd57e983c11b0e2cfc032bbda5d411a3ec43a65b10a4eee71e918f89e40809f092c216e0a55825b001e588c6ee71c83b8a092e5f8f1c27ae5a4487d8188d5b6c5fffcbf729270ad26c2b6e1042db63a37667d6b5f01f7b0efc45915d65a246be28736a2de5753386d3b7aa1925b84350a15a25f87a", 0x8f}, {&(0x7f0000001680)="0f2d9ea357449738191c5a5c8951341f3c5b538eaf198ce8ad2b3487147acc1da79eba606c67c8b910120a1a3bbe364d06ba327c4d4a28053dcfd2af38af0e5422d7dc0a42e5", 0x46}], 0xa, 0x0, 0x0, 0x8000}], 0x1, 0x1) fchdir(r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x53, 0x8080fffffffe) 06:48:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xffffffff7fffffff}) dup2(r0, r1) [ 278.210464][ T26] audit: type=1804 audit(1554360533.750:61): pid=27928 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/170/file0/file0" dev="sda1" ino=17186 res=1 [ 278.234933][ T26] audit: type=1804 audit(1554360533.760:62): pid=27928 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/170/file0/file0" dev="sda1" ino=17186 res=1 06:48:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x1, 0x4]) pwrite64(r2, &(0x7f0000000200)="1f658de9ab8c4929a5ba1b53a1ba7f20392efc5a4c6c9962e1f83c424844485b2f9a9042d2b5d78488db4a916a3f3a553e1a1a736b882b2672c191997b31fb4cb1b21783fb864df09678289ab555bb91f1695de3fdd2e6724264f972f671d4f737b845e854837125fea007ff0fd83c13f2ed454154b79347ee1d9d76630865d1680521b9c4473b62625ea33d08207fef62deac7be2411122762fc8aeef70cb51216b893f0878b0ee54ba53b21872c993475274d27071fafdc2e74932a01b6bacd112f1f5", 0xc4, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000100)) 06:48:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff00000001, 0x20402) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x7, 0x10000, 0x7, 0x1}, {0x8, 0x8, 0x0, 0x6}, {0x3, 0x0, 0x3, 0x3}, {0x6, 0x40}, {0xff, 0x8, 0x100000000, 0xe40}]}) dup2(r0, r1) 06:48:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x1000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r2, 0xde, "79167fe68cad9b2d454887ea97887a6f9624de159a74c0b231c3ea9834afecfd601acb17222104cfefc427f5b00478658cbd2cd128f7666c1ae9b40d4d394e8e62bae8b9df22f9268ec84f19a6f4c723576f0d536d8fb5d3ef5256fe15cf93c59719a572284781a43f2d0cb40254f72eed2cfa08fa4320baeecc3e706b089b92e5f850aaaa2002458b8365786c9af070d226d102154fea88fadae1cedcd1844d33a5f551c5e5ee3b6af124ba29eb8388df3799205e3bbbbe03937945e41f93eb66e85f18a3496f83b9e340957ffa80423881a8d9c00b923a150b81cbec8d"}, &(0x7f0000000140)=0xe6) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="7e0aba494a11e1fc51c4673012b620ca08230159e7991dde3745cce26ac9d24c6074fbb08b4866e372a95910c3559344f9797e8870f0dd455e", 0x39, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r3, 0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000400)={0x9, 0xf3eb, {0x55, 0x3, 0x4, {0x3, 0x3}, {0x6, 0x1}, @const={0x0, {0x3, 0x100, 0x9, 0xfffffffffffffff7}}}, {0x53, 0xb82c, 0x7f, {0x8, 0x3}, {0x5, 0x8}, @period={0x58, 0x8, 0xffffffff, 0x3ff, 0xffffffff, {0x1, 0x1, 0x8, 0x3}, 0x2, &(0x7f00000003c0)=[0x1, 0x3e88]}}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000740)={&(0x7f0000000480), 0xc, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r4, @ANYBLOB="000426bd7000ffdbdf250e00000020000600080001005c0900000400020008000100000000000800010002000000740004000c00010073797a31000000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00002c000700080001000e00000008000100050000001800030000000000080004000800000008000400de0000000c00070008000100040000000c00010073797a31000000003c0009000800020000000080080001000000000008000200090000000800010008000000080002000400000008000200010000000800010008000000200006000400020004000200080001007f0000000400020008000100800000003800040014000700080002000008000008000400090500001400010062726f6164636173742d6c696e6b00000c00010073797a300000000020000200040004000800020001000100080002003f000000040004000400040020000500080001006d6200001400020008000200bbfdffff080003000aea0000700005000c00020008000200008000000800010065746800240002000800020005000000080004009affffff080001001d0000000800030000040000080001006574680008000100756470000c00020008000200322500000800010065746800080001006962000008000100756470000c0006000400020004000200"], 0x1f8}, 0x1, 0x0, 0x0, 0x4000000}, 0xd5) 06:48:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@remote}}}, &(0x7f0000000380)=0xe8) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xf403000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010000000000]}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0xc04, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1bc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x20) 06:48:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x620100, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000000)={0x58, "202998b83bf859cb73517ab244f9f86e742bc94c71e9442ef3b6b55b51509a7db07dfbeb03729891a5f147c9df1afc74e6bef0127290ffa564faa37c103444ccd8dd92b0f775aba4ec8b4b2ecaf1057a598e9ae5294432b8"}) 06:48:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000000)={0x8, "2726ae6f381cd5bcf941b2b47c84d4dbefb6ce24bf6ef0826a84931d4dd89717", 0x2, 0x1e2, 0xfffffffffffffff9, 0x8, 0x3}) dup2(r0, r1) 06:48:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20000, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, r1) 06:48:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 278.745572][ C1] net_ratelimit: 18 callbacks suppressed [ 278.745581][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 278.757092][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 278.905549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 278.911417][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:48:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x56, 0x8080fffffffe) 06:48:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 279.186776][ T26] audit: type=1804 audit(1554360534.730:63): pid=28619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/171/file0/file0" dev="loop1" ino=29 res=1 [ 279.211464][ T26] audit: type=1804 audit(1554360534.760:64): pid=28619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/171/file0/file0" dev="loop1" ino=29 res=1 06:48:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x1020, 0x2, 0x1, 0x1, 0x8, 0x9, 0x80, 0x8, 0x8, 0x7, 0xe9d, 0x7, 0x0, 0x80000000, 0x4, 0x9b, 0x6, 0x1766, 0x6, 0x85b, 0x5, 0x3, 0x10001, 0x8, 0x2, 0x100000001, 0x40, 0x7, 0x9, 0xffffffff, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x6}, 0x20000, 0x3, 0x6, 0x7, 0xfffffffffffffff9, 0xc84, 0x80}, r3, 0x8, r1, 0x9) dup2(r2, r2) 06:48:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2001, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="341d", 0x2}, {&(0x7f0000000100)="a8f34e769fa652ccc866808a3e79ee220ed38218b10089bd3c0686e082361d6a1b43fea3cda5b65c58e4b5fd60aa0a32222f569d9866ad8b593d6f8b225e3822dce62da0f953569c0b156ff770dee268d105df19fcfa5b2665f98484e3a805b88d41ad35011ea6db97092888b01d0f0e71993e21b194c23f87695326e901", 0x7e}], 0x2, 0x0) 06:48:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x386) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = geteuid() fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000500)={0x208, 0xfffffffffffffff5, 0x100, [{{0x4, 0x2, 0x800, 0x1, 0x0, 0x4, {0x6, 0x0, 0x8, 0x5, 0x8, 0x6, 0x80000001, 0x3, 0x1, 0x1ff, 0x2, r3, r4, 0x80000000, 0x1}}, {0x1, 0x9fb6, 0x12, 0x5, '.\xb1\'cgroupsecurity\''}}, {{0x1, 0x0, 0x8000, 0xe063, 0x8, 0x2, {0x5, 0x4, 0x1, 0x1, 0x2, 0x38d, 0x1fb, 0x6b23, 0x8, 0xffffffffffff3de0, 0x20, r5, r6, 0x100, 0x6}}, {0x3, 0xffff, 0x9, 0x100000001, '/dev/ion\x00'}}, {{0x5, 0x0, 0x7fff, 0x8001, 0x100, 0xfffffffffffffc06, {0x5, 0x213, 0x5f, 0x9, 0x80, 0x6, 0x9, 0x7, 0xc22, 0x9, 0x5dae, r7, r8, 0x1c53, 0x8}}, {0x2, 0x2, 0x4, 0x1000, 'ppp0'}}]}, 0x208) dup2(r0, r2) 06:48:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, r2) 06:48:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x402000) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000200)={r2, 0x2}) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r3, r4) 06:48:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x2001, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x14}, 0x4}}, 0x0, 0x67d4, 0x0, "9002f66c4a63a31b86e58b786b8cfa31cd34e15a10e8de4f123b9d23ac31677f782ddf52b80d622ccdb6b2dac108c904d73736c032f0ea74748f604d4dc05f18ff00dfbf23fad6a7bf8fbbfcc9ed68a3"}, 0xd8) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000340)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="00fb56010512404bbac63ba180a22198118154616241fee4dbd187f330e21e96fc706ff5977c15460c1820542f9800de45c262bf2b27563af866e14680b05c5024eb2c42cd796ec4b60d2b1412e89ca61a2c39e91a37"], 0x56, 0x3) fanotify_init(0x26, 0x801) sendmsg$nl_crypto(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88040}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@get={0x108, 0x13, 0x408, 0x70bd2b, 0x25dfdbfd, {{'seqiv(pcrypt(rfc4309(morus640-sse2)))\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0x3f}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0xca25}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x800) 06:48:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x101043, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x400) dup2(r1, r2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x40000000000100}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x7, 0x100000000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x74, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x5, @empty, 0xfffffffffffffffb}, @in6={0xa, 0x4e23, 0x100000001, @loopback, 0x2}, @in6={0xa, 0x4e23, 0x1920174e, @local, 0x5}]}, &(0x7f0000000280)=0x10) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000080)={0xc00000000000000, 0x100002, 0x4, 0x8, 0x15}) [ 279.385522][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 279.391357][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:48:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r3) [ 279.466016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 279.471824][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:48:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x400, 0x20, 0x1, r2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x94, 0x40020000000209, 0x0, r2}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x3, 0x12, 0x1, r3}) dup2(r0, r3) [ 279.785591][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 279.791441][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 279.828601][ T26] audit: type=1804 audit(1554360535.370:65): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/172/file0/file0" dev="sda1" ino=17223 res=1 06:48:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) 06:48:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x0, "1f5b9bfd403820ec"}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = socket(0x1d, 0x7, 0x7) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0xb) r3 = dup2(r0, r1) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0701ff83d3030000fc0200000004000000000000000000006965c00ccfbe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000100000000000000000000000000001000"/299], 0x126) truncate(&(0x7f0000000100)='./file0\x00', 0x0) syncfs(r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000380)) 06:48:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0x30, 0x2, 0x8}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x455c}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x401, 0x8}) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r3, r0) 06:48:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1005, 0x3) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:48:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x58, 0x8080fffffffe) 06:48:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 279.859670][ T26] audit: type=1804 audit(1554360535.370:66): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/172/file0/file0" dev="sda1" ino=17223 res=1 06:48:55 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xb5, 0x10000) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) 06:48:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x5) 06:48:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x426, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:48:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) pread64(r0, &(0x7f0000000000)=""/35, 0x23, 0x0) 06:48:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'team0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x1, 0x200, 0x3, {0x0, 0x7530}, {0x77359400}, {0x4, 0x0, 0x10000000000, 0x8}, 0x1, @can={{0x4, 0x7, 0x80000001, 0x2}, 0x2, 0x3, 0x0, 0x0, "0a6a84aa821d30b1"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)=r3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r4) 06:48:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000500)="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", 0xfc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup2(r2, r2) 06:48:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x101, &(0x7f0000000200)=""/188) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x8, 0x400}) 06:48:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x400) ioctl$KVM_SMI(r1, 0xaeb7) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000023}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r3, 0x900, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x40, 0x3, 0x7, 0x20, 0x100]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x34}}, 0x8000) 06:48:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}}) dup2(r0, r1) 06:48:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x59, 0x8080fffffffe) 06:48:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x62, 0x100000001}, 'port1\x00', 0x80, 0x10020, 0x2, 0x8, 0x2, 0x5, 0x5, 0x0, 0x3, 0x400}) 06:48:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e22, @rand_addr=0x5}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) shmctl$SHM_UNLOCK(0x0, 0xc) dup2(r0, r2) 06:48:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x0, 0x9) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000002c0)=0x7, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x6e, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=""/110}, &(0x7f0000000280)=0x78) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = fcntl$dupfd(r0, 0x406, r2) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000000)={0x1, 0xffffffff7fffffff}, 0x2) ioctl$RTC_PIE_ON(r3, 0x7005) fcntl$setstatus(r1, 0x4, 0x4000) dup2(r0, r2) 06:48:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:48:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x3ffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) dup2(r0, r1) 06:48:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x4000) socket$pptp(0x18, 0x1, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000100)=""/116) dup2(r0, r2) 06:48:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x81, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000200)={'nat\x00', 0xb5, "fc4fc3cc2fafd5f4ab068ecbe6a0c302f12effaabc35f1332b68d71a6065763c8477bcea9fe8ffdbfb2c9ef5f1f726d6d2966bb2e685aa7c5f9d6eb05ccc4510dd608adbbc90a7db6f73fb3107b18ec904ceafb977688ef75e2d6f8e17dd6cc4b7038294c06687d939bd6535731915d3e7616d479bcc06e49dcf4c18b125cc4a93104cb2723dab772dc44336af7f703f2739fd58c55ac0e2db17c8ff952bac5d0d9616c50f5550e521914f1023eea92be38c3f326f"}, &(0x7f0000000000)=0xd9) 06:48:56 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x10ba, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) listen(r3, 0x20000000) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = geteuid() openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x30) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x101, 0x38000000, 0xffff, 0x3, 0x8001, 0x3, 0x0, {0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0x10000, 0x5, 0xdf9}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000340)) getgroups(0x7, &(0x7f0000000100)=[0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) lchown(&(0x7f0000000200)='./file0\x00', r5, r6) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r3, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r7, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x0, 0x0, 0x0, 0x27000000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x7, @mcast2, 0x2}}, 0xffffffffffffffe1, 0x6, 0x2, 0x10000, 0x24}, &(0x7f0000000040)=0x98) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r8, 0x1000}, &(0x7f0000000140)=0x8) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 280.806455][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 280.806468][ T26] audit: type=1804 audit(1554360536.350:69): pid=29765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/174/file0/file0" dev="sda1" ino=17137 res=1 06:48:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5c, 0x8080fffffffe) 06:48:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r6) 06:48:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:48:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) r2 = dup2(r0, r1) r3 = getpid() fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x1, 0x7fffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x8000, 0x310, 0x1, 0x1, 0x3, 0x20, 0x8, 0xbe6, 0xa9b6, 0x10001, 0x7f, 0x7, 0xcb1, 0x5, 0x0, 0x4, 0x45, 0x6, 0x10001, 0x4, 0x5, 0xc1, 0x0, 0xffffffffffffffe1, 0x4, 0x10001, 0x3, 0x8, 0x4, 0x7, 0xffffffffffffffa1, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0xb400, 0xa02, 0x5, 0x5, 0x800, 0x80000001, 0x3}, r3, 0x9, r2, 0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x300, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4000080) 06:48:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x12b, 0x3, 0x3, 0x6, 0x67, 0xac9}, &(0x7f0000000200)=0x20) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000100)=0x4) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x0, 0x659, 0x8, 0x6, 0x1, 0x401, 0x3, 0x7, 0x7fff, 0xb6}) dup2(r0, r1) [ 281.110187][ T26] audit: type=1804 audit(1554360536.650:70): pid=30032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/175/file0/file0" dev="loop1" ino=31 res=1 06:48:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 281.253103][ T26] audit: type=1804 audit(1554360536.680:71): pid=30129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/175/file0/file0" dev="loop1" ino=31 res=1 06:48:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x484001, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:48:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5f, 0x8080fffffffe) 06:48:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x27, 0x3, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r2, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x40402, 0x0) r4 = syz_open_dev$amidi(&(0x7f00000058c0)='/dev/amidi#\x00', 0x4, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000059c0)={r4, r5, 0x6, 0x99, &(0x7f0000005900)="d8049befa4ee99d9ce9b5500b7d1d30f17d5bc8cba42e4cdaee9b52276953ea31d783646f165c9793a4dd229ca26f2531f84e2ea3448e2878ebcb3fb902d445cb489e44af029f87e0b0d3f7d79c1b3bf9d28a3e6811493d86cbd188438ea7f8c2c4bc640223555d7793c79ab935bfdab31e4b9d4ba00665c4b1605b650bf13cb3fb39ee2c8b904d989d9117e3861c1ddda1390236b8f50c614", 0x8, 0x4, 0x9, 0xff, 0x1000, 0x3, 0x9, 'syz0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x50, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x40, &(0x7f0000000140)=[@fda={0x66646185, 0x1, 0x4, 0xc}, @flat={0x776a2a85, 0xb, r8}], &(0x7f0000000200)=[0x48, 0x78, 0x70, 0x0, 0x0, 0x0, 0x38, 0x78]}}], 0xc9, 0x0, &(0x7f00000002c0)="32764fb31bc17edaf9e26c968e60e038575f0e035570030f38c26eec77d536277d6474457006741a980686b625bc9ea191bb8bd0f1f2f24f7adafebca64b188cd8b909c7c6e4cf3b6e7139c2d85c4a39ea3f357f6539c0b2efa6c4e849e2a2ebab9a9eae7b2294b9ab492db9cc66f211f07fee71a9839d592d591e862da1c6e144f8f76721ab3f75f7124f9f4b414ec4e8b7adfacf12e9e229bb631237f363f9acf067dea37f206d04c73c86f652fd5a97d8eb5227e97ca8882aa9b149380050fe9f3eeca350307389"}) fcntl$getownex(r1, 0x10, &(0x7f0000000480)) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000400)) [ 281.494380][ T26] audit: type=1804 audit(1554360537.030:72): pid=30338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/176/file0/file0" dev="sda1" ino=17227 res=1 06:48:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) io_setup(0x3, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:48:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = gettid() fcntl$setown(r1, 0x8, r3) dup2(r0, r2) 06:48:57 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x581040, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4a8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x49}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:48:57 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x100000000, 0xf, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) msgrcv(0x0, 0x0, 0xffe0, 0x0, 0xa4a3ad41a87ddde0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) 06:48:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x62, 0x8080fffffffe) 06:48:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x02\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xe9, "6ffdbccc3155ca150a6f7c9ac1699b51b9dcdb494fe43ca8f03eb2fafe0d9afc4c6d46e56a5b725da252a3604255da29f009568531284eb2509d8c42974e33b5ec6e981d8e10b2ea4a725095931a196d075f42ac03cd42245fbce3206a59a19cdefa48666c0d7b3cb7800034aa559b7ae4077e7fe363d5a7db466b32c4eaa558a24a608912feabb17738f6b0d15043ae7c6e7bd03caa72f126598c307d8c2ede331afaa4154c45b802dab80e683ef90cfd23659e61d9eafcfa5198c17882748939dab43a2087b7aced89b2c6106b0fa2ac3c913483eea5b940fe5849388c02550dab72a0b85174f2d6"}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:48:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x5, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 281.912027][ T26] audit: type=1804 audit(1554360537.450:73): pid=30464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/177/file0/file0" dev="loop1" ino=32 res=1 [ 281.950154][ T26] audit: type=1804 audit(1554360537.450:74): pid=30464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/177/file0/file0" dev="loop1" ino=32 res=1 06:48:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x65, 0x8080fffffffe) 06:48:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) r3 = dup2(r0, r1) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xd) 06:48:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x03\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x204000, 0x0) r3 = accept(r2, &(0x7f00000002c0)=@un=@abs, &(0x7f0000000100)=0x80) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x1000, 0x4) dup2(r0, r1) 06:48:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 282.159479][T30689] QAT: Invalid ioctl 06:48:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000200)={0x2, {{0xa, 0x4e21, 0x1, @rand_addr="b7113c5fd770a1e0d2a97895690aec8a", 0x3}}}, 0x88) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x28002, 0x0) getsockname(r1, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000040)=0x80) r4 = accept4$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10, 0x800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{}, {}, {}, {}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x7ff, @loopback, 0x46}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x3}], 0x48) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000780)={0x3ff, 0x80000000, 0x0, 0x0, 0x6d5dacb4, 0x2, 0x2, 0xfff, 0x0}, &(0x7f00000007c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], 0x43) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000540)={0x7215a1f4, 0x1, 0x9, 0x800, 0xb9a2, 0x228}) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000500)=0x6, 0x4) dup2(r0, r2) [ 282.216523][ T26] audit: type=1804 audit(1554360537.760:75): pid=30692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/178/file0/file0" dev="sda1" ino=17137 res=1 06:48:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x68, 0x8080fffffffe) 06:48:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) socketpair$unix(0x1, 0x10000000002, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 06:48:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/102) getresuid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f00000002c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache='fscache'}, {@afid={'afid', 0x3d, 0x1}}, {@access_user='access=user'}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0x1000}}, {@fscache='fscache'}, {@nodevmap='nodevmap'}, {@loose='loose'}], [{@smackfsroot={'smackfsroot', 0x3d, '^eth1ppp0'}}, {@euid_gt={'euid>', r5}}]}}) 06:48:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000209, 0x1, 0xffffffffffffff9c}) r1 = dup2(r0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0xfffffffffffffffd, 0x2, 0x6, 0xff, 0x0, 0xd61f, 0x200, 0x0, 0x101, 0x4, 0x400, 0x6, 0x2, 0x7f, 0x400000000000000, 0x6, 0x7, 0x2, 0x7, 0xffffffff, 0x3b3f2a92, 0x4, 0x7, 0x0, 0xa1, 0x1, 0x3, 0xd231, 0xcc8a, 0x68d3d486, 0xfffffffffffffffc, 0x200, 0x0, 0x5, 0x0, 0x400, 0x0, 0x1000, 0x1, @perf_config_ext={0x6, 0x8}, 0x20, 0x1f, 0x3, 0x0, 0x9, 0x100, 0x60}, r2, 0x10, 0xffffffffffffff9c, 0x3) [ 282.408685][ T26] audit: type=1804 audit(1554360537.760:76): pid=30692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/178/file0/file0" dev="sda1" ino=17137 res=1 06:48:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)="2e0000002800815fe45ae087185082cf0300b0eba06ec40000230000000007fe000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x400, 0x3, {"ec9b1ef3eebf2f72c7df89a3a5d2d845"}, 0x7, 0x81, 0x5}}}, 0x90) 06:48:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:48:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x04\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8000, 0x1, 0x42e, 0x0, 0x2}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000206, 0x801, r1}) dup2(r0, r3) 06:48:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6b, 0x8080fffffffe) [ 282.585804][ T26] audit: type=1804 audit(1554360538.030:77): pid=30850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/179/file0/file0" dev="sda1" ino=17233 res=1 06:48:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x9ca, 0x1000, 0x7fffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:48:58 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r2, r3) [ 282.710889][ T26] audit: type=1804 audit(1554360538.030:78): pid=30850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/179/file0/file0" dev="sda1" ino=17233 res=1 06:48:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40280000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, r1}) dup2(r0, r2) 06:48:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x05\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x240000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0xfffffffffffffebf}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1, 0x7f, 0x5}, &(0x7f0000000140)=0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='irlan0\x00') 06:48:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = msgget$private(0x0, 0x100) msgsnd(r4, &(0x7f0000000240)={0x2, "ce37e710b169a45794483600242b0d1958c8247a92601b967bd4b3a64b24080b5b9ba77048014ec449b94a097050ec078538ae980aaf77c506174301e640c8df33f68205169ac5606af2fe5d21b35116d0f1af4fbd87546927204ba0ed0274cf7465dc3a2f7c09aa8dac1918ff13be2eb437a778729fa3d9e83020f9e2a4a151c2af1751da020525dd62543b75982871be3dafdba5a3d4"}, 0x9f, 0x800) 06:48:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6e, 0x8080fffffffe) 06:48:58 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa599ce11bec5186dd6093a69700181100fe8000000000000000000000000000bb00000000007f000000000000000000018800907800000000fe80000000000000000000000000000069b1e9b8512ecb1fd8bf9ab7fe03d11792d394e70f0679b0e60b19cbc8a7bf2d5fff7122d52d340b6922938ab947d152f06b1e04d9b572ac3b956b4fec5d4a"], 0x0) 06:48:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) 06:48:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x71, 0x8080fffffffe) 06:48:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80033d, 0x4002000000020c, 0x0, 0xffffffffffffff9c}) dup2(r0, r1) 06:48:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x84010, 0xffffffffffffff9c, 0x35) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={r2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:48:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x06\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x2, 0x1012, r1, 0x0) [ 283.626971][T31412] binder: binder_mmap: 31402 20dff000-20fff000 bad vm_flags failed -1 06:48:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) dup2(r0, r1) 06:48:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x74, 0x8080fffffffe) 06:48:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="3edfdf6567360fae8200400000440f20c0663502000000440f22c0f3a70f0666b9b603000066b8f98a7c5a66ba5e232f580f300f23a2ed64f30f0d960090d1ac0000", 0x42}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, 0x0}, 0x4000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:48:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\a\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000000000000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033b, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:48:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x77, 0x8080fffffffe) [ 283.945553][ C0] net_ratelimit: 22 callbacks suppressed [ 283.945561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 283.957101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 284.105588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 284.111445][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:48:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\n\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:48:59 executing program 5: r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) shutdown(0xffffffffffffffff, 0x0) r2 = dup(r1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) write$P9_RCREATE(r2, &(0x7f0000000000)={0x18}, 0x18) tkill(r0, 0x16) 06:48:59 executing program 2: setgid(0x0) eventfd2(0x0, 0x80001) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_dev$vcsn(0x0, 0x3ff, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$TIOCLINUX4(r0, 0x541c, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) syz_genetlink_get_family_id$tipc(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000540)='./bus\x00', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_to_bond\x00', 0x1000}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) 06:48:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @empty}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@remote, r3}, 0x14) 06:48:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7a, 0x8080fffffffe) 06:48:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x9) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)=0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000a00)=0xe8) getgroups(0x2, &(0x7f0000000a40)=[0xffffffffffffffff, 0x0]) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000a80)=0x0) r14 = geteuid() getresgid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0) r16 = fcntl$getown(r3, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000f40)=0xe8) fstat(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540)='/dev/net/tun\x00', 0x14000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000015c0)={0xffffffffffffffff, r2, 0x0, 0x9, &(0x7f0000001580)='/dev/ion\x00'}, 0x30) lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getegid() r23 = gettid() r24 = geteuid() lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001780)={0x0}, &(0x7f00000017c0)=0xc) stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001400)=0x0) r30 = getuid() fstat(r3, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = getpid() fstat(r3, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003700)=0x0) fstat(r2, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000037c0)=0x0, &(0x7f0000003800), &(0x7f0000003840)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000003880)=0x0) stat(&(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0}) r40 = getgid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000003b80)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003bc0)={0x0, 0x0}, &(0x7f0000003c00)=0xc) lstat(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000003d00)=0x0) lstat(&(0x7f0000003d40)='./file0\x00', &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r3, 0x10, &(0x7f0000003ec0)={0x0, 0x0}) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r3, 0x10, &(0x7f0000004040)={0x0, 0x0}) stat(&(0x7f0000004080)='./file0\x00', &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000004140)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01]) fcntl$getownex(r3, 0x10, &(0x7f0000004480)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000044c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000045c0)=0xe8) getgroups(0x7, &(0x7f0000004600)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r56 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000004640)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000004740)=0xe8) stat(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000006dc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000006e00)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000006f00)=0xe8) getresgid(&(0x7f0000006f40), &(0x7f0000006f80)=0x0, &(0x7f0000006fc0)) r62 = fcntl$getown(r3, 0x9) stat(&(0x7f0000007000)='./file0\x00', &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000070c0)='./file0\x00', &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r65 = getpid() getresuid(&(0x7f0000007180)=0x0, &(0x7f00000071c0), &(0x7f0000007200)) r67 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000007240)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000007280)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000007380)=0xe8) getresgid(&(0x7f00000073c0), &(0x7f0000007400), &(0x7f0000007440)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001380)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000074c0)={0x0, 0x0}, &(0x7f0000007500)=0xc) r73 = getegid() sendmmsg$unix(r2, &(0x7f00000076c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)="7ec1731a7ab1cc8d81ee3bd7bef4aebb0c7c4a0a9ec47c603b967ab9a352bc74f3641c7c481c477d185648138b0d2a117dd7056b908acb8e932ccd215dc171efd338e826298830d795fa2df1715332c46b062694b7a2c00434b880bf6f9526a4f243f2ff77", 0x65}, {&(0x7f0000000280)="0406f59a2ae33d0779dc474bd1c8189090ac8e6630db2c11dfbfe389dd7bb38f996050f3316fbe703d4dd4f58911fe79a8e6e5251d1e7639c31018142593f4c83cf004738423c70f1e9972adbd2c1204d5f9f85a96a92ff9c2b3c087f861978985b023b2cdd0bfa358abf6b607078e07cc819a2d509e4200c4c19631194037f74449020704c1b90d11387ebe539ab12f57d388a91d94a8c37fcd3d0a2b6343e2e66691fdbac6", 0xa6}, {&(0x7f0000000340)="50a9390d10473184f14e4b26fc5f264e660abced4cc24e65cf4aab16c03de12a0eacb6f01c455767c20301dbb079b213d070074ecc5c046a398d5be0495c8fe3c2f71899f067ba7b3acc0636cdb6e329014c0ba4de4c9ceea85689c9e4c7d4b1b0d4ad9402570a092e09820348b224df815654a8dd5987d05e3ab152745d84fca8938c9b099ab6ee70d267c0251b44d3a6ab66636916839eeb10da6e335cd781c5de40f863adf749f4616aa2def333e36682babeebd7f2db6e81dea34800a2964edb8be34b3ee72eacab93c387183461d67094cd19fe4c4e5af6351bcbac6cd8d1a09f2ec511a085d6d646263cf3318dd617e87095c2bab4", 0xf8}], 0x3, &(0x7f0000000700)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r1, r0]}], 0x70, 0x1}, {&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="605142948f2e5930fce5ede7df736cecb39d809772c46431bde4cebc15cce12fb01c6243baf2e9864bfa3b6309236e4b3c1faa7f6f94d84f1b73c555e9ad0ab2fd3f8f8c4ee0e66d102bb15383d67b689f6ad5b2b9cf5adf627ad8b80797dad7487e9fdd0381f7568136cbfaa6cb93", 0x6f}, {&(0x7f0000000880)="8013539105707cf0e6c533228e4d918a4a5a6aed4c12ca0083d514829a98b4ac5f805c757a267f00695dda28327d800ddb489782", 0x34}], 0x2, &(0x7f0000000b80)=[@rights={0x20, 0x1, 0x1, [r2, r1, r3]}, @rights={0x20, 0x1, 0x1, [r3, r1, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r2, r1, r0]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x30, 0x1, 0x1, [r3, r3, r2, r1, r2, r3, r0, r0]}, @rights={0x28, 0x1, 0x1, [r3, r3, r2, r0, r3]}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x28, 0x1, 0x1, [r3, r1, r2, r2, r2]}], 0x138, 0x20008000}, {&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d40)="545687f60774c2a14dc9481ae660021ec5cbfd2d9d2e", 0x16}, {&(0x7f0000000d80)="3292420eef46af6986365a30df29e119d742f3f5ec395e2130784cba41c0ec757507358a02c95d1811745b8b4da91910602a2ba19ecfafb64c25a679d51f22e7d1fc802f91cd822fff81ef2960c751", 0x4f}], 0x2, &(0x7f0000001000)=[@cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x20}, {&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000010c0)="46afecf1fc6102eb2f3404932449382e7796bf3dc32fbce45259c3e21d90aaa69ed027c5cd2a662f147c081d7e9a3335869482d60081def2c6558d85fabcf1a1572b0dea36d8af1865239b51c12d3101abdd4d5fce9dc911e947718eec8b48113a56b31c41a3d1fde5aa5ea052eba410c53890a752d2078c513dc27e841ffe84f9fbb0198d33931716d17f43cc20cc315b2aa03e183c5414e0dde844d2243d7b8b4d1393e484f058dfca08a420c6053882f0a01fa1b3c919067d948223d2f2abf068b55d83559e372ab5b621bc2e1a740dbd20017569fd8e6fe3314fae1bbe330acfbfe0cf9b2be36366ab5bbe20", 0xee}, {&(0x7f00000011c0)="012f3c37e9f9a2f1c18e0346862337880913a802381d", 0x16}, {&(0x7f0000001200)="9ee4496a7149f3c8e88e100be1c82b2154397aefcc35ba8d5775d12e91a4e1cc480d5d6138d5a12ebbaad7642d402717b4907789705c9fb68eb96a7025356edace489f623fbb86db4947fa6abfe27db940e05aa19a326f9819019a4673ee53e3a8535d40d33bc737bd609ac8003b7a07436f1127fe2ca8cb18d2fd122ffb1ffab226b5eda8fe741956085a4548741ed8645344d1e6bc97db85d11b76871ceefc050f5b277ac57192c1d534324d3973c52a0bc2e6910265201f04dcf1e65c5c156cda328c5828062047de3e9c2de12a1fa2f07fdd5e93c0c8ffe0eeeade04c4f9e6fbacc62d338e961c69f9dffc", 0xed}, {&(0x7f0000001300)="057a0a74", 0x4}], 0x4, &(0x7f0000001980)=[@rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r3, r3, r19]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x20, 0x1, 0x1, [r1, r3, r3, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x20, 0x1, 0x1, [r3, r3, r1]}, @rights={0x20, 0x1, 0x1, [r3, r1, r0]}], 0xf0, 0x4000}, {&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000001b00)="e47d389a1e93f0fa30115224b63ad512d2b444b3a9626f104c0fbabe6106181c43febfe1ac3db81fe941b880a12901eeea38dc2018a8254110adefa583b079022937c173b7a3772e7821750ddc0fee3198df043f682378b007678468b4e23020f0783d48aa6d07118f61040257a0035c4f18e682b300c69edca0aa332ef6010bfc934d395b58e1992798105282b0b6e55f909958cc22f623c8fd444f5401dd518ac481106abac754f6c98a9f20a4a60bc1fc0c92912423261cdd88a0c799d4efb8411f2b6c139d4c7aa1fd3c4fe30d89791073d01ff6", 0xd6}, {&(0x7f0000001c00)="6315db72c9fff8a0ecdb67d89b84c61ba74229b3e6d59ae2d3dc540bb3e9326fdf00", 0x22}, {&(0x7f0000001c40)="49cb7940aa3b274277a4f4949f2153c8c48505df9d324c4448dea22e856c7bbf951a5a46d31d17fda741f608a7954433228fa45fecbbe7bc98df9aaeb34b42775e333c23aca24b236b0cd213120fc5888c6be88694d7df92d50487a1289655bb4e8a5e790923e258a3560e9b274d6794d11afff43c372fa51ace3ec2ef9b1fc19ae359a5", 0x84}, {&(0x7f0000001d00)="2e0b3b0b91833a0b7e5620c6f2b66e8db7de561fccbfc2bd5eaa5ebee8419b154d0fe99b7391250a0cf4c71ff03d9f6a5f8cf54f29614ad3e1c8db8fde04b29b0f7287ba4edc426be99cc44b300e75c67f17fdd4c31006f0fb2447d6e43eb17dd84dd460a9ce88a8b872fb4e8f025db43dc518962c7071fe90172cc5a91cf319d197f119e1ebee", 0x87}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="fdb9ced3fd1e0e488c24eeb6b83e932c1a6165e471b1db9b26560c15b8d1bf20da0378a8b17dacd83b2d321579103dc51e8b6fa33b490903fb8c3566173169bfffdf08c41d0073968521a28c937e00846a221fface0676d823b74596dcb31f6379a8345aab6baebcd8bb9abfa50d14cbbc9c63805216894ae453996be1f8faf4e1c203c219f4e38472945c8bdc5351396950953dd59ec1c2f1446c79abaac161797a79548655f5e2de9c54284a5d4a4c81ee42618ba8507100a4192f012287a44b8d41de70e35dd64f50a0c239fcb093aeed", 0xd2}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)="9c39f0951f72fe0d6b863435c0f029ea01b655a55e4fba742c9ed761927fed7e", 0x20}], 0x8, &(0x7f0000003080)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x20, 0x1, 0x1, [r3, r0, r3, r3]}, @rights={0x28, 0x1, 0x1, [r3, r1, r1, r3, r0]}], 0x68, 0x13c0830f4c799441}, {&(0x7f0000003100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003180)="64cdb17ed4f5b542069df479d779f396c471eb51a3da6b392bc945254d9489cdd2db86991fbea25e9e1dc175dd79eddacbfa2f926290303306de755b88411cdd8731a9d482e869378e1961930233d33e3b58e38d258ab065487a51c135305fc4d197706a6d246a3273a06a020e999b50b5d535ec999c4c1d5876eb907dc549f0293d60b48b9079fb9688bcbc5db828b23a146d57b9bd7613b5f0d37032698bdce6ba2313966f91b143107eec8195b2d826cef46ac34ad76d06aa74102aae2ab5c4cbde31ecf375adfa3c7d238079d83c", 0xd0}, {&(0x7f0000003280)="b9c6b937197bceb65f8f7b930ba00b456e8ae0d0f6f753a642a572a1c1d7946db91b8b8013a5fdba3c8b3d9169d96738d10a09c50d568481002c0a458ddc9afdd7a7b7c7b2fbd570f297e6c17fbbb327a38f3607859a91adb7d7282faf24def03f6adede7c6117c672f38a522907fe0fa8a3a0554fbe7581b1a49244176abc97c005eba7691797dd7f9375ca595fdee5760c260e1a88677420c8ac09827c172e4c", 0xa1}, {&(0x7f0000003340)}, {&(0x7f0000003380)="fa156ebc55730c4f95dbfaad6808b9bcf63da606102e44c3a942ad86845bbd9a4bd6b0413c9b47979f4aab0bf7e0634a2ea90ef42c7c205334cfbd57d10a2bbd650442767891747bf73fc80e96585c480b00b97a1f2b59ddfae0547397c13a3c1aed06dd4f288df16adbb6764de506414bb7c5749c304590a165e089ed3c7d2b886732cf5ca3782d3acc08d6ffadb17d5e4dbb78bb6aaa289a65a1649abd82c64052f58104f9a1f6", 0xa8}, {&(0x7f0000003440)="d2cbc898fd03fd723b15b1f1596084e6ed82d04be5fa7b05905bebde0293ec28b6a5136263849c3e0240d5b23dfbdd7ba721bb4a01dc42b37562a8e51b3b6cb5bb2eae060c10b5f8870c8fca4b30895178603ae4ce8dc2b4517adb5e02b04e0ac0eb26019c1dd88e5b96206d3be2f76b2ae06ee62e177f7fc3e3975fed972c2a17be13741e2e4d09848078f42a25c5d45c713f5ab50c64da6eb8fe1490bda1f3288a44ab96bf739dddc72d66aa6890db142cefce47d888c5036b4968ba928670cd6e2e49f7f878a52f8f893cfb4924992c8a02d6dab27e", 0xd7}], 0x5, &(0x7f0000003980)=[@rights={0x20, 0x1, 0x1, [r2, r3, r0, r3]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @rights={0x20, 0x1, 0x1, [r1, r0, r3]}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}], 0xa0, 0x80}, {&(0x7f0000003a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003ac0)="eae4009fba4f421b2de93d4c3dc80f1062e0859e1e7de48598c0799fe468e0bc11c3db4d53f7ad9c18d281d6aa529ec2c3d4dde056daa032ece376f9a7cfd5d411e3f1341543dcdb2e7a0d66eda5ab2d30f351d37dfb85623d441de5abc5857f8fd631af", 0x64}], 0x1, &(0x7f0000004180)=[@cred={0x20, 0x1, 0x2, r41, r42, r43}, @cred={0x20, 0x1, 0x2, r44, r45, r46}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r3, r3]}, @cred={0x20, 0x1, 0x2, r47, r48, r49}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r50, r51, r52}], 0xc8, 0x4}, {&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004300)="64a82b8663f2aa4c1d5bc734918a268bbf4f37c691e69c1aa00e020a7d3a89c614be0f5ff3f08c1eb20314c3440442726d909ca43e2757cc089d4af7e2d72d3a5bbf0146a21a50a0cf67a359695d2f2b4be20093c12b8b1aeb27fcad259d3848a2dcc666f88775389c07e726ebeb496f657943f0b7d97c681e2244ca8c941f2da433469030b8931c39cbcc3a612772579722f6ea977119ae84405cbdb7574016ccba37f9b82fa5c87cada055fa6641b716709f9c5da8c77c17f8382841eac548a694e8e5b4fcd9a135dc558319ed77", 0xcf}, {&(0x7f0000004400)="2fe88edb8b91bc4d3c0866fa304778502b5efbb2149b1d0ebc50d23f1d7fbcf222ea2041a1e231bd8f", 0x29}], 0x2, &(0x7f0000004840)=[@cred={0x20, 0x1, 0x2, r53, r54, r55}, @cred={0x20, 0x1, 0x2, r56, r57, r58}], 0x40, 0x4000}, {&(0x7f0000004880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006d40)=[{&(0x7f0000004900)="4ffbd4743fc86e422e4d2718951573f25c1838ccb633cb23e359c5dcdd67ca10c69bfe81524074a0074a5798a0c9e90c2618de05bc93eea0074b4633ce94bdbf5ca52102aeb9ac88cb8f022e7ff262fa9663d5447912d90b442380296a15e57f27ac5bd45895ffc8729a8bc3a019703dae9a524880dae748b527277525cc978a73524754ba48b84a11eff36674f328affad68ec23e06ccc7d9e5b491cd7918a03b602e83d145414d965311452eca5e571788b2c934de2a50ebae999d7960846ef77f027511b34538fc9423db1b2261ab", 0xd0}, {&(0x7f0000004a00)="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", 0x1000}, {&(0x7f0000005a00)="56b13243a60b887e241bcf9d8a577d0595c1e11c72a95394249238ccd79a8888a8a83c0527b453b68ee0746c45feec368ac5c108cda8f928aeddc2e2265246a21834cb887eedbf56047e2dc91f7ead9a867ee3b8fb2704e366a9e9d7df0a72e28b48049834db84b3a53f2070", 0x6c}, {&(0x7f0000005a80)="ba0d5fcae3e88860940f3f0419902ad3fcbf1335e6", 0x15}, {&(0x7f0000005ac0)="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", 0x1000}, {&(0x7f0000006ac0)="4f5957ad132d9d76f4598776c7122aeb7417c613b2936e88deecd3124a5cb455948d7984a0921b7c6f5833e3a9d37788562561b7822f771e07f9ca89fdffbea2fff656e0c61711db8e11ffb61eb74969b0e43763f89256c5c9f17b208f50c62c5a37304336b4d4c2c3351897e5756cc1044b23301f4ce278e73842fc92f937d1d4f05a43f99fbb941e04e67c35709cd66df96706ea1792cc84dd7073496b449c34549c65b98d9dd8f2fd02e46e", 0xad}, {&(0x7f0000006b80)="dc6f84e4aef96724211a61855a30a717a5218acf9fcdbd5a0620040070e6eab722a59fdbd2a1e39ee20092cada57bf737394281c69677b5736a2671805fde5cbfeff94bd9d33abf3b6da7d707ce9b35e542a1b26d32d17a994f89ff5856ff87dc6d8b66d929a6fd31e07f59304e374ce3eaa210e4b49bdd47056e65d9a97bdacd50b587bc0a6764266785d078e072a49cb4d9a7885970cc1707a641a8d17ea5366b89a5ed1c890458e9b51927133d55797a6adace2ad1ed29e927e5ba5", 0xbd}, {&(0x7f0000006c40)="3cad1bd39fe6f5c81eb3f8fd2bdb5c6eb3a549ddae60a505f7a4e7111453371ee3e347bdbc8aba65570b6366e60739df42ef2638809d5ce2f277699773529b19c0a1c99a7a7aeef5b54a4db08b470f399b73d791636ba00acb88eb97820b2b53dcd27171deeceb61848349610d9c14a54130fc9d088bb962ac115c7fd29aaa2fb59e379367cbfbcb7222dc8cad49495c6faf1083e48dcaba768c46cd529f3f2db7c6234da75b9769c73e574d81cdb7937955935fd26054b205f1fedd02d92a3fb42dee1e621ef7be48698dfea115efe01653725d0171c2aa7f74efc1e0d505d92d157d6a246c74aef1500b3533eac43a", 0xf0}], 0x8, &(0x7f0000007540)=[@cred={0x20, 0x1, 0x2, r59, r60, r61}, @rights={0x18, 0x1, 0x1, [r0, r2]}, @rights={0x20, 0x1, 0x1, [r0, r0, r3]}, @rights={0x30, 0x1, 0x1, [r2, r1, r3, r2, r3, r3, r1]}, @cred={0x20, 0x1, 0x2, r62, r63, r64}, @cred={0x20, 0x1, 0x2, r65, r66, r67}, @rights={0x28, 0x1, 0x1, [r2, r1, r2, r1, r1]}, @cred={0x20, 0x1, 0x2, r68, r69, r70}, @rights={0x20, 0x1, 0x1, [r3, r0, r0, r2]}, @cred={0x20, 0x1, 0x2, r71, r72, r73}], 0x150, 0xf14e0a978c866072}], 0x9, 0x4) dup2(r0, r3) 06:49:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) 06:49:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000000)="9f", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/164, 0xa4}], 0x1}, 0x2) 06:49:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xb0, 0x8080fffffffe) 06:49:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="3edfdf6567360fae8200400000440f20c0663502000000440f22c0f3a70f0666b9b603000066b8f98a7c5a66ba5e232f580f300f23a2ed64f30f0d960090d1ac0000", 0x42}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2400088}, 0xc, 0x0}, 0x4000) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:49:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x0f\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x600, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) dup2(r0, r1) 06:49:00 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040), 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x40000020, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) 06:49:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf0, 0x8080fffffffe) [ 284.985857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 284.992247][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0xd2, 0x4) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000200)=""/198) dup2(r0, r1) 06:49:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'H\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x40000, 0x0) write$capi20_data(r1, &(0x7f00000002c0)={{0x10, 0x8b1d6f6, 0x84, 0x83, 0x7ff, 0xaf7a0000000000}, 0x3c, "cda9c125281a484b8b9b90cc603e9b633e0ea5998bfa3d014f89288fcacc2cc30f31112ba62151fef6d7cab06f401b6bd349f757c7cdb604a5abbe74"}, 0x4e) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2465ac86, 0x101000) r4 = add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="3bb3186dc830c1ce0f2db7eab04763cd30aa86c61334e335f7fa110cc4b258d360e10c64a66d3dc62dfcd63b34ac99ce1d1e90739ff7343d36c802d3c4dfc99e0d782338eacf30", 0x47, 0xfffffffffffffffb) keyctl$clear(0x7, r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x5, 0x70, 0x3, 0x3ff, 0x8, 0x759c, 0x0, 0x5, 0x8e, 0xd, 0x80000001, 0x3, 0x0, 0x10001, 0x200, 0x6, 0x2, 0x4, 0x1, 0x4, 0x375, 0x101, 0x7, 0x8, 0x9, 0x6, 0x0, 0x7fffffff, 0x0, 0x1, 0x3d8, 0x6, 0x0, 0x100, 0x2, 0x100000001, 0x7, 0x9, 0x0, 0x401, 0x5, @perf_bp={&(0x7f0000000140), 0x2}, 0x8, 0x8, 0x6, 0xf, 0x5, 0xfffffffffffffff8, 0x4}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000040)) dup2(r0, r2) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) [ 285.155551][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 285.161404][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:00 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f128291a41d88b070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x3000000, 0x0, 0x0, 0x0, 0xffffff87}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 06:49:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x108, 0x8080fffffffe) 06:49:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'L\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xaf}]}, &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) timer_create(0x0, &(0x7f0000000140)={0x0, 0x1, 0x2}, &(0x7f0000000200)=0x0) timer_delete(r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x14300c, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x60002) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r3, r3) 06:49:01 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x1, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x4, 0x0, 0x5, 0x9, 0x401, 0x4}}, 0xa) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1501, 0x1, 0x3, 0x6}]}) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x6) dup2(r0, r1) [ 285.625515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 285.631329][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004500), 0x3fffe65, 0x0) 06:49:01 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000200)=""/102, &(0x7f00000000c0)=0x66) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x8, 0x29, 0x200000000000000, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) dup2(r1, r2) 06:49:01 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x160, 0x8080fffffffe) 06:49:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x5, 0x7, 0x8, 0x8, 0x1000, 0x0, 0x3f, 0xff, 0x9, 0x9, 0x31, 0x100000000, 0x6, 0x7ff, 0x100000001, 0x46, 0x4, 0xfffffffffffff001, 0x2f, 0x71375b80, 0x6, 0x0, 0x7, 0x7f, 0x2, 0x9, 0x5, 0x8, 0x8001, 0x8d, 0x20, 0x5]}) 06:49:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'h\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xd, 0x4002000000020a, 0x1, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000200)=""/158, &(0x7f0000000040)=0x9e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000100)) dup2(r0, r1) 06:49:01 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="3edfdf6567360fae8200400000440f20c0663502000000440f22c0f3a70f0666b9b603000066b8f98a7c5a66ba5e232f580f300f23a2ed64f30f0d960090d1ac0000", 0x42}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xe9, "6ffdbccc3155ca150a6f7c9ac1699b51b9dcdb494fe43ca8f03eb2fafe0d9afc4c6d46e56a5b725da252a3604255da29f009568531284eb2509d8c42974e33b5ec6e981d8e10b2ea4a725095931a196d075f42ac03cd42245fbce3206a59a19cdefa48666c0d7b3cb7800034aa559b7ae4077e7fe363d5a7db466b32c4eaa558a24a608912feabb17738f6b0d15043ae7c6e7bd03caa72f126598c307d8c2ede331afaa4154c45b802dab80e683ef90cfd23659e61d9eafcfa5198c17882748939dab43a2087b7aced89b2c6106b0fa2ac3c913483eea5b940fe5849388c02550dab72a0b85174f2d6"}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:49:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) sendto$ax25(r2, &(0x7f0000000000)="9774e96ede0b4ebec9dd9d9bcb95a1f69b8efdf7190a27", 0x17, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7f, 0x400, 0xffff, 0x1000, 0x9, 0x28e4fad3, 0x69c, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x9, 0x0, 0x3, 0xc9b, 0x5}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @remote}}, 0x5, 0x7}, &(0x7f0000000100)=0x90) [ 286.070990][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 286.071004][ T26] audit: type=1804 audit(1554360541.610:101): pid=341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/189/file0/file0" dev="loop1" ino=36 res=1 06:49:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1b8, 0x8080fffffffe) 06:49:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'l\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:01 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40000, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x1, 0xffffffffffffffff}) dup2(r1, r2) 06:49:01 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x31b, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x0, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @rand_addr=0x3}, 0x9}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0xff, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x3}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x4, @rand_addr="c8995f069f256ec489b749bb0c1e1b05", 0xfffffffffffffffe}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r1, 0x5b, "1dafb10bc3fbe15ef02400b97e7976e248528042e2faf04a22972ce789f5c43cfd2fad013be945cfaabdd620e39afbfebb6970036d47937cef5d03fa320d58d20734f88bcb0005ffecd0b98459be849cb79877e3ec8f8582a04425"}, &(0x7f0000000340)=0x63) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 06:49:01 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 286.445221][ T26] audit: type=1804 audit(1554360541.980:102): pid=580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/190/file0/file0" dev="sda1" ino=17287 res=1 06:49:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getpgid(r2) dup2(r0, r1) 06:49:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'t\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x210, 0x8080fffffffe) [ 286.546452][ T26] audit: type=1804 audit(1554360542.020:103): pid=620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/190/file0/file0" dev="sda1" ino=17287 res=1 06:49:02 executing program 5: perf_event_open(&(0x7f0000000780)={0x2, 0x70, 0xa6e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) 06:49:02 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:02 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) r3 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6, 0x1, 0x7, 0x3e, 0x0, 0x3, 0x200, 0x2, 0xce1, 0x9, 0x8, 0x5, 0x100000001, 0x3, 0x4f, 0x6, 0x9, 0x2, 0x9, 0x6, 0x7ff, 0xf27b, 0x7, 0x7ff, 0x5, 0xbf1f, 0x2, 0x4, 0x3, 0x7, 0x0, 0x4, 0xffffffffffffff11, 0x0, 0xaf40000000, 0x7ff, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x3}, 0x1000, 0xa, 0x7, 0xb, 0x4, 0x180000}, r3, 0x5, r1, 0x1) 06:49:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'z\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:02 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 286.805112][ T26] audit: type=1804 audit(1554360542.340:104): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/191/file0/file0" dev="sda1" ino=17295 res=1 06:49:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x268, 0x8080fffffffe) 06:49:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004500), 0x3fffe65, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:49:02 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x4000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) sched_getparam(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 287.107392][ T26] audit: type=1804 audit(1554360542.650:105): pid=1112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/192/file0/file0" dev="sda1" ino=17274 res=1 06:49:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x03\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x2c0, 0x8080fffffffe) 06:49:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = memfd_create(0x0, 0x0) vmsplice(r1, &(0x7f0000000580), 0x0, 0x5) getsockopt$inet_buf(r1, 0x0, 0x31, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x5806, 0x9, 0x0, 0x2, 0x400, 0xee}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000180), 0x800) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x7fffc) pipe2(&(0x7f0000000600), 0x800) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000780)=@abs, &(0x7f00000006c0)=0x6e) accept4$unix(r3, 0x0, &(0x7f00000005c0)=0xfffffffffffffdcc, 0x80001) r4 = getpgrp(0x0) r5 = syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000003c0)='/dev/ptmx\x00', 0xfffffffffffffffc) r6 = request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='/dev/ptmx\x00', 0xfffffffffffffff9) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff4f, r6) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r7 = getgid() clone(0x1ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = getpgid(0x0) ptrace$pokeuser(0x6, r8, 0x4c5c, 0x7fff) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000740)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$TIOCCONS(r5, 0x541d) setfsgid(r7) move_pages(r4, 0x200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=[0x0], 0x6) 06:49:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000000)=0x6, 0x4) [ 287.220976][ T26] audit: type=1804 audit(1554360542.650:106): pid=1182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/192/file0/file0" dev="sda1" ino=17274 res=1 06:49:02 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb0ae, 0x20000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) ioprio_set$pid(0x2, r2, 0xe35) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) [ 287.428213][ T26] audit: type=1804 audit(1554360542.970:107): pid=1370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/193/file0/file0" dev="sda1" ino=17283 res=1 06:49:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xc2182, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000200)={"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"}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x300, 0x8080fffffffe) 06:49:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = memfd_create(0x0, 0x0) vmsplice(r1, &(0x7f0000000580), 0x0, 0x5) getsockopt$inet_buf(r1, 0x0, 0x31, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x5806, 0x9, 0x0, 0x2, 0x400, 0xee}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000180), 0x800) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x7fffc) pipe2(&(0x7f0000000600), 0x800) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000780)=@abs, &(0x7f00000006c0)=0x6e) accept4$unix(r3, 0x0, &(0x7f00000005c0)=0xfffffffffffffdcc, 0x80001) r4 = getpgrp(0x0) r5 = syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000003c0)='/dev/ptmx\x00', 0xfffffffffffffffc) r6 = request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='/dev/ptmx\x00', 0xfffffffffffffff9) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff4f, r6) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r7 = getgid() clone(0x1ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = getpgid(0x0) ptrace$pokeuser(0x6, r8, 0x4c5c, 0x7fff) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000740)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$TIOCCONS(r5, 0x541d) setfsgid(r7) move_pages(r4, 0x200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=[0x0], 0x6) 06:49:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x05\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 287.518217][ T26] audit: type=1804 audit(1554360543.000:108): pid=1370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/193/file0/file0" dev="sda1" ino=17283 res=1 06:49:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = memfd_create(0x0, 0x0) vmsplice(r1, &(0x7f0000000580), 0x0, 0x5) getsockopt$inet_buf(r1, 0x0, 0x31, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x5806, 0x9, 0x0, 0x2, 0x400, 0xee}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000180), 0x800) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x7fffc) pipe2(&(0x7f0000000600), 0x800) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000780)=@abs, &(0x7f00000006c0)=0x6e) accept4$unix(r3, 0x0, &(0x7f00000005c0)=0xfffffffffffffdcc, 0x80001) r4 = getpgrp(0x0) r5 = syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000003c0)='/dev/ptmx\x00', 0xfffffffffffffffc) r6 = request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='/dev/ptmx\x00', 0xfffffffffffffff9) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff4f, r6) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r7 = getgid() clone(0x1ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = getpgid(0x0) ptrace$pokeuser(0x6, r8, 0x4c5c, 0x7fff) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000740)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$TIOCCONS(r5, 0x541d) setfsgid(r7) move_pages(r4, 0x200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=[0x0], 0x6) 06:49:03 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x06\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x10002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x20, 0x0, 0x80}, 0x10000, 0x1000, 0xfff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x30, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40040) [ 287.794815][ T26] audit: type=1804 audit(1554360543.330:109): pid=1651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/194/file0/file0" dev="sda1" ino=17274 res=1 06:49:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x318, 0x8080fffffffe) 06:49:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22}, 0x19) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close(r0) 06:49:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033a, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\a\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x2, 0x2700) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0x9) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) clock_settime(0x4, &(0x7f0000000380)) open$dir(&(0x7f00000002c0)='./file0\x00', 0x8081, 0x10) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x8000}, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)) dup2(r0, r3) seccomp(0x0, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x1, 0x2, 0xffff, 0x4}]}) 06:49:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f128291a41d88b070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x3000000, 0x0, 0x0, 0xc0ffffff, 0x3d}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfc8c, &(0x7f000000cf3d)=""/195}, 0x48) [ 288.180431][ T26] audit: type=1804 audit(1554360543.720:110): pid=1987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/195/file0/file0" dev="sda1" ino=17287 res=1 06:49:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x370, 0x8080fffffffe) 06:49:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40) ioctl$KVM_NMI(r1, 0xae9a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = dup(r0) openat$cgroup_ro(r2, &(0x7f0000000340)='padX.cerrent\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000240)={0x9e0000, 0x7, 0x5, [], &(0x7f0000000200)={0x9909fe, 0x100000001, [], @p_u16=&(0x7f0000000140)=0x100}}) bind$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:49:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 06:49:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x315c}, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x3c8, 0x8080fffffffe) 06:49:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x0f\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400202, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x8c, 0x2, 0x81b0}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000240)=@can={{}, 0x0, 0x0, 0x0, 0x0, "8b92ebd5251e82ea"}, 0x48}}, 0x0) 06:49:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000040)) dup2(r0, r1) 06:49:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x420, 0x8080fffffffe) 06:49:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 06:49:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x404, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xe, 0x0, 0x400) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x4}}, 0x10) readahead(r1, 0x9, 0x80000001) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xffffffffffff09b1) 06:49:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x40a000) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x4e23, @rand_addr=0x1000}}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) dup2(r0, r1) [ 289.145537][ C1] net_ratelimit: 19 callbacks suppressed [ 289.145546][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 289.157097][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x478, 0x8080fffffffe) 06:49:04 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(0x0, 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) write$vnet(r1, &(0x7f0000000100)={0x1, {&(0x7f0000000200)=""/186, 0xba, &(0x7f00000002c0)=""/4096, 0x0, 0x6}}, 0x68) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x105000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000012c0)={{0x3, 0x0, 0x8, 0x3, 0x3}, 0x14ed, 0x3ff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00@\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 06:49:04 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(0x0, 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 289.305552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 289.311370][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000100)=""/80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x7, 0x8000, 0x20, 0x1ff, 0x7f, 0x5, 0x80000000, r3}, 0x20) 06:49:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00H\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:05 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(0x0, 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffdbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffff}, r1, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 06:49:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x4d0, 0x8080fffffffe) 06:49:05 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x2) socket$packet(0x11, 0x3, 0x300) 06:49:05 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 289.785522][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 289.791434][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 06:49:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00L\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 289.865511][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 289.871327][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0xfffffffffffbfffd, 0xffffffffffffffff}) dup2(r0, r1) 06:49:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 06:49:05 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x528, 0x8080fffffffe) 06:49:05 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 06:49:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00h\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 290.185552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 290.191370][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 290.217992][ T3709] cgroup: fork rejected by pids controller in /syz2 06:49:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x40000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x3, 0x0, 0x1, r1}) dup2(r0, r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40a800, 0x0) 06:49:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x580, 0x8080fffffffe) 06:49:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @remote}}}, 0x88) 06:49:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) waitid(0x2, r2, &(0x7f0000000100), 0x8, &(0x7f0000000200)) r3 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x5, 0x200) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x1, 0x0, [0x5, 0x7ff, 0x7fff, 0xdc91, 0x4d3, 0x4, 0x1, 0x4]}) connect$can_bcm(r1, &(0x7f0000000000), 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x6e42dce3cb4fa031, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000002900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002940)=0x14) connect$packet(r3, &(0x7f0000002980)={0x11, 0x9, r5, 0x1, 0x7fff, 0x6, @broadcast}, 0x14) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000002c0)={0xa2f, 0x1, 0x1, r4}) dup2(r0, r4) 06:49:05 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00l\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:06 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f0000000100)=[{&(0x7f0000000200)="790cfec5cab5ac8422fa8f4c7c112a9d7fa73133048fe35823c684c4b4b51fb7a1724880bbd4192f5b7e0b12faa40e715c122daf6e5325f0e997ca4e78fd733817f0610fb638f1409be9564c5088e2a0ac0b1991cdfd6cecd918b22a058fab76e1348e25b842158f64183f4ab508010aabdfefef38318031ff0b6e7de4ea4ac23a5c650cc670b5a34fe6c70108293a904b9c57763c1f13419ad0481df4f18ccd", 0xa0, 0x1}], 0x40000, &(0x7f00000003c0)={[{@dots='dots'}, {@dots='dots'}, {@dots='dots'}], [{@euid_eq={'euid', 0x3d, r1}}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000400)={r2, 0x0, 0x40, 0x7fffffff, 0x5}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x600, 0x8080fffffffe) 06:49:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019001200e60100006c000000000000000300000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 06:49:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00t\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:06 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) [ 290.675420][ T4047] EXT4-fs (loop5): bad block size 8192 06:49:06 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x400) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000002c0)={0x1, 0x2}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r2, r1) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) bind$isdn(r4, &(0x7f0000000040)={0x22, 0x9, 0x6, 0x20000000000000ce, 0x87}, 0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', r3}, 0x10) connect$netlink(r0, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8104000}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000200)={0x1f, r5, 0x10001, 0xfff}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xd) bind$isdn(r4, &(0x7f0000000280)={0x22, 0x200, 0x81, 0x80000001, 0x7c2}, 0x6) 06:49:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019001200e60100006c000000000000000300000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 06:49:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xfffffffffffffffd, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) [ 290.953852][ T4253] EXT4-fs (loop5): bad block size 8192 06:49:06 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) 06:49:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x801, 0x8080fffffffe) 06:49:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0600, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x1ff, 0x4) lseek(r3, 0x0, 0x6) dup2(r0, r2) dup2(r0, r3) 06:49:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00z\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:06 executing program 5: 06:49:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200080, 0x0) accept4$tipc(r1, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001ac0)={0x0, 0x87}, &(0x7f0000001b00)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000004ec0)={0x0, 0x4, 0x7fffffff, 0x0, 0x0, 0x8, 0x4, 0x80, {0x0, @in6={{0xa, 0x4e20, 0xb1, @remote, 0x859}}, 0x80000000, 0x3f, 0xffffffff, 0x20, 0x3}}, &(0x7f0000004f80)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000006980)={0x0, 0x7bc}, &(0x7f00000069c0)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000006a40)=[{&(0x7f0000000200)=@in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x80000001}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000240)="c2003c31e385b98186a5d4f65e4c202042a49ea40825221acdea4f6a", 0x1c}, {&(0x7f0000000280)="492e5ba7268cf7d4b2c1cd2fa854742f3eae2a89a293fd05ac0c87b6b9572a70356bf0a43b0a425124ac7726ea840eb3e7f9662c68709848be184bf14d0c6286409b9238d83ea3f561c4a4714b96307db50c836a8c206ac528136c664b158f5f9b4db1774950b39f0f84e5a727eca4ce7ce0ac9047f4a78e1939a5b6c5ccb1c649fea1360df8cb8f7c00e78dc78bc1bfde4af22b2833c13cd00bbb4476228cb1a5fc4b7801b9ee0a359082a2009b743f7bbe512f70e420ad8facd6e1599c46efb2349bfc111559c217da776dcdfbf0278a1c94c07f609fdb76e50ca300d421ce9af774d47cc18829c8ed167639e55be1938e0a80f805fcb514ff92b7cf9b6cbe7d3270540cf82e160cb29738c768d656dd3a906a5d5f7e38709b18197f313614db4ac8bb569f00eadfc5bfb1bc4903a05269fa165c7d1fd1b63debc2dcf386195ec7e8566599f1c948c986c8d5375725c19c009fff49f34744488ca67974d0c1c95263f9a6ab33ab60f85b8a5a3ca25d0c38320fdc00730fa2aed364771deb1dd5b836126cda693f9ab9e2bde213b19dfd93e535ccc52f586303ee80a3fe1c1f66b5875a24c1b8da1eff455f453c91e9b3e9daafe5205287296a6004d5f94c4f63dffc4ec0e4b01506d5f0b7afd2f6cdd18f256278748a41e6074b9a9a1089d24377818d5606acff5f9a3ac1a3a03f38bf61e7010445eba03b47f4ace6a93757deb59d33de42d50053765575672aa499499485e8f2471a3d1c18342c454e78e6ecd7f03a5db4b369b5c71fdb10b04c87577cc1fa612845267b904aeeeee63b206352a62bf9e237a0585b12e2202814a65b02658c5e8abc0c963219f12bf4fda1541c43272bf61ea608127834faeda40f70f3db068da4b1e0b8e7af15e285add8c8fddc6d191f5198bb19d5bee985d0d3163be49f8304232758e5aa2fca459af13990ccbe736fba911d08743a16d47bd22be920137a8e87e1ee8b659175d49b2c36646023ff99c0610c0f1287f07ac7c930107044436872ca4eab8cb583609940cc73c5325a43030742cd9413265bd0671d36a3aac018427d0a1adeb0e42f52e4350bd9e8bbf34f2031bee9f4475be8b31630e50e17fef065ad2958af11ad1957cee59097fe4c0a321894860128357502028098709bfd8f2a4fc26a1faf327ee67ecb503dbbe9510e13910783d449c7cfaf6dd39e30f6974ca0ea13e27d8ce792d8cb5772858da1c8be2d6be059014adadbe486a186aa2e8e41212cf8663101805938af32a58d8e90a577996c5ee5260042c31439eb39f108d6a7dbb1b26f9f2f9afe914a3975ce6bf1dfad8067226a5b8e3a30cc0867b6ffdaa9aeeeafe79645248fe3c6bfad3ae7da4915c0cd1731a86569743d2373a86210df7389a5dc979c816722dc1eada80c8330696ec935fe97d3b2a892f78a9c670a304d3811437a361da490c86b79f2617d507a23ed751805ce0fbabf090d7b788a91c2bfee94ab4c93127fa5f2c813f63b9de10881087aebe7f347090b898ef039632e2012b108b97a840eef7648fcefc489840ec0ee6b3e4866cd5483a68a8d55083eee2d0ca1a6844ca0b1e106f7ebc2f6607a0c222631265eb449ba9fcabde1f35ab02fd1e736b2cb1fe4553a13e45560fc3da8b2b858fc1a33115aebb30a21ef6587539a058953e8ee0d1b22da4964e98afcdac616fa31008bf0d5f581649e0ad0d97465c3bf78d2615bc2270ebf1152dda9dc53f60639ff95706b718df2ce8a5ff8467beffaa541d68e5c750b647be59e5d0f76afaed76606a6e141d400f12e6033b463273728a0711c01b11cb96f7f6a640d8d15a6203db80a56f25ae0ece3e1eff888a24f6a2f33ba58c96f87889c19b339b55ddb5c0356c30e659262a1c75265691b48475eac25a24c0f90d0bdce77557ce31825ef1e2ecf07b9c50709a23a683d12d3a04a224f8847d2c7bb4b3efd864915bfb7d76a5ab8b0d16ba4151ba672282679f416b7f5b396c4d2e35267f482e5a5d4eab74a3bbae1e56462a7bf80ab6f279937244c58effaacf9c79c29733ad11b69b5f626871f03b36e7b3478cb0788c258eec68973107e76be3f9209eb29dabf409ea3ff74e805f1b54fe03d4a43daddd34f3fe9323bfdfa01326967f6bddd6c7b31bdba7bc2c74d7de10c579750ccaea549ad69b0401bafacc6df9faec8551ebfb671586c7a84b8b1f7621e6e194ba3d23935030478b791da342a01a3af07293007b8de6d572d012b7f67fb26bf8fd151df427fe07470b67115930a361c9a67b21cfa063e1d2de9769a000b078898f71936ca80e69a48fa1a425784c628de5617a2af04e15896c24b514c0efeeb1af56152ca560f4d80c4c7a641f723277aa21160e75ec1003c24b40c4680880733ed5e4e6ec539b202ded428ec2bcd409ada65e19df1a0dc9584394ecfdb17a04672c2ee0197d86825fb9e317195f2d82aaff37f4d7bd22db048349f32ecb91afbc2f5f26ac3e3c92219d60bb0dd7bf3f69236cf6a72fa8c26b1052322cfef4a58e3f5ce1aabc796e5a197e2ca96537217e3a9d74a395985359c144bd1b079232d18de3789d3b42fa19278c2493fc74a6c42aa0c39ca746fe94584a8be89f9ea2af623d6498f6cc9cc3965a765055936353e8029454925c2b545b66343f33eea7fc29fdbbd6b2240ce4aa2e51a6b6f1415ae9d3a73838a3c8ca2da06263973beb080a682d2e3bf3a21054ad3ee66c237a078d0be55201a1eb21226686e945c8d43c3ea6f0d0d010e0fccf472dbbdd604ea4c134e6c9d94416cc8e5decb27940b526e7bb003ec79e8af5c40858dcd6161b6052a99585c4f8839909fb34d17071affa3a30937422e68f1832c8607276f9fc0cfadad3da67dc5af867b7dcb3088ea1a90ca5a1bc362f5382078a14c950ac065c298ecf5a2cacb49531dcc5a969edc346fd17060bd49d8fcf3dca754bcd953e26eb78136fdbbba2157e159009483a1284091e9f56b06716aeb78ed10b547d756a628e190c45234174a1a71fefd5626e4da882d93f6894172620c9603f2bc94093e78113329e5a7f97f4104048885bbb8e8e7d23e78fb42ce67d70508c9e87ae8e0885e613f3aed3c4d84b2cf14255109f258133d36958ad42428ba73a4b0f7f4f6dfe4764c2a2ff78667f57de2466ffb0483dece5237dd3b870b3d62924f72626a102bb5e5450fabfaae8c948bb87c561857f4f068a9cf4d0137e0aa713f82bd10048b67f8436a8da68f72078f2fa38c1e1d1c72775980a383ae68a9997123c58072674cbc9ff879726f487c6336503327b09a84cd0aefc6e8858e624d6ec88b27ef1feb33eafa2131930f940ed7d516d76022451ac6ddd3f76292367b877a345e0ffc5ceff72c236f0e9abdffffa0bb4c75438c585b37d6af2ce507516f6d098eb1d266ed7cbfdd86addd467c15eaade77501e4e759873972428b44cbd2f2fd62f4219db2e8e5885210968f02b412710cb7d1eece090626a1f4e9b7284a5a908a1c9d5c62f84bcf8b876caeb28f30ba94d19c50998cf979996c8261edf75b1d983ef761598fc47f168e3176d650fff308ede20e74206615f5ce9cf356c359f527d6ad150a865ce2746aa57507fe8345a88011986906533782186a30de9319f0a06d8ab907b8c64889627a8f3da5c39141307554c5a54e55b9f7fc15dec5ec555dc109f7d3554480669cd2a669676e6c2f3126621a9bdc7e4db79a3703ad97a4c3849ec9c2df75644f752ec3bf66a10afeb92bbfbee5304c9b115b30c7c0656254396ae55724a58bf37c867ca52da4dcdbfe1190b0c578b3ba2e029a20d0f7586569acffa0a17ade1bcb431fc86dfa328f4be98ca32352d10040204bd6da0ab99aed4896400220514112f2e60d4e2f3519b7b094e5a36aaedb228b5e6a46996e32a504c635408679bb9e700ae6a9af44046b7c6f5d9b5e2b571b96fb5e5139e07b674e2148615cb499a79eb119a8cd4c4d3a13e4ab945b800a2edd4a25fef379258cf75ec398fed99e77964d774d8f1e737e3cddf0e4f44d54c6c40cdeb0072ea26ce55b99d5504903468b88ce5b1b05ad51b172a1a3a345b8474744e6eb257f70ba991fa58429830dc0bf2966a63ab6c2e0f715234382f913b71ec734e32c227c6605e85fb65fa2bbe48ebe6718f38c13efbd37f047eb8d1082ded3eb6eb9ccccfaea447babe6a946cac21072f5e6cfb988aec6c57e757241ad02bea642a259418ba8d984d046c1df9bfe204b7696572edd7aa0f177d8d07e271a44567a58bee7ec1e9d10a481f15cb968077354f381e4348aec1fbc7af8bb46e23cddd8a7123825082f574223b03bedab99af71c345984d551c2a4f88fea8835fc7fc74385768eb9675dcf664e70876dc90d955b8874ac2dc90ebbc12974520d88344d26a285d6adf956db5640bdb853c9b5ddea4101b847a5a7b00ea4618a03ae24c275042db5b66bbf9fd8617b05dbc4e426930ceff82530226f8bcab9c78f09dbd8097da244d99ffcee98b0b5b8d465c6df8746d53f2bbcb8dae0b1899b8fa6c84546e504d1ce6918d34c8512ae328473b59dae8fdf35c04e057293361e001c5bd0a9aaa54575171a53be2c4e76f71c225484da1136d4b66beb41de2d23accc5e1b0d9ea9098c3d1c49602cc4d05a3c072fb5733bcf97cce6389573b205e5388d76bad59eb91332a8e9a9b95c4ff65aaa9d80a365e22b2ac53a91424f05c388173ba2a5d33e0e3951f4ba0c9109b6a6d162ba9510f197f7b1947a5400993d546d673c4eb2c4f8812d17136cd35b52bbf2df4176f93dad93d30cbe0bb2772809bec96bf207769a6c3bbd8b584eeb752538a19739d7dee3f114f547d90468ea8e24d35e2565af7e0179b24d25b2332c567ea4c9f0a59602a8ae3c236e0d2209a250d742616da384d55a1ddf80f5f2541c8c79f591ba1ff8e8735307a809871270f3361d84aa3971302890adb37f3200a676cf8c05d8a4c6c75b42835f57c0637a5a5526bca071955ab1d1d56d9c760f933ddd43decd94ecfb319af24124e2bd88e2e2bc7242da73ef77a49339e06e26ec67ebe3a66e19957f9a8030cdc43c6bd0ced4b324cc206fb367d9a6bf3bfee7d83f80911583bad80d50df71c1ff02be0c1e86eea903e2db690209a3901f9719a489bcaf4a920b63ba8cf4b6af21318f10897d4064f959c093080547b1ba8d20b300dafdc576dcd86d11243d65e084e7e4ec7c271dc8913641c08b43b8507221e813806bc2d183787cbd3adbc177cfcb60a3a5574fc7539f5973f48ce12650fbcf703b185429b5492c9558c2410af9a078df018e2357708ba8784bb472ade55c06978642fd8cdf69a39fa45b577afe4bdc7e803d3e5aa244b3b5e40349183c263a49d19bfbebcc3e5e2592836f092c1cd7e874c258a09c0df5ce7e1014ef6777314e70813c5178aac1f4fa37d957f07a82cd018688fbe330bfd358bc8f44bb488e3553aec45ba0e6cbaea9a7c3d2e8bb45e33d2f4a2f1fe7f456b0fc3692493eb52bc40a1a789bafc1a1a78d6595f4dfa72b44923df3a54e1ca436ae12ef179c29be1a20a647148495cda94786c78e1547fea370d10375163a51db30de7f972bb957a711480f5088f7d64adf44519dc69f5f5fcf2e97ca149593d0a7af1cda7bbe3fe51c508d64e7626632003f584e6aaa88ec3d1fcab41184ea20a1012c801ed91a763b65f23b7190adc024c8eb886370d9f5bba8acfae0d355dcda1d8a9754ca814870e2c45d5ae2ffd952006b21de87018c4309af70a1886c051389615d38a951de167c6899847", 0x1000}, {&(0x7f0000001280)="619abf1d86a676bf53b65c2a8c35292ada70b5896f14249176f3db2aa8c0266a8044fa82592d35c005f45f0fb98ad84073449e28be923270becef0c0b298f58f221294fd221a7e8364cf4ec7b276634d16dc3cce137930efb00579914d8ace4f4624", 0x62}, {&(0x7f0000001300)="b0e713efcd6a6d7ec6f64588385bf5644d89fc9048beb826709d39d2fe12da33a403640152aeac99af189dafeeb7b42505bfe9a512a0b84a19a4a7fc8e09bfb053b705a15aa4e07ff67bde3bacc78f16b8576b1a3fca32132a92796918604750b55419403f7388d322be188853b0d7086f145c88d2c1577ae1e219e41dd45f7f87fd89848365", 0x86}, {&(0x7f00000013c0)="77cca786166e15ec229d06ccef89d46e12e462e8311d617aad0016dfcf4420ccd0d48d40ef7f87fe0aa59820adf664877bdea28a5573515818f7762017276507005afc03075d26f747f57fc1b745f213b30f3106066ca646de58fbc88ed01d997af7de19890811092292487c59fae7011ae1e295e4e4fbe392997e6e38848f8315964491d97d92dbebd359a9dbd72869607383b7c31053981f7d9e81473dfe927f61a2f791fe2defe4a50b8b0dabc6b328eff70f3bb126d94ee3c8df6781838d8385d6ed07cc5a91f6c26a13a2ed3d5a8bf34bb48d1b0f01ef657b52912dd730dd9f60628b1cdcca266999364802", 0xee}, {&(0x7f00000014c0)="b35da1301accfd6c064605740bb0b7eb5d0bb2c490427ed9c2915bd2dc61d00e7bc12b6cc116a3aff49ab20e07d8777823f72be91faf08de63603a96e94efcce1c6246c6268d275ac52f67cfbb2cc2541cb74bffa11c65df2724bbf5c657639c2161ae21efce3fbc788f76cccfcbb365eba546d99101c428461f8560d5e5aafcdc919d360fae87c97649a5a7e530102cf552981e53f92074088d5a99e044b5ee96db3e1333aac79cf0c8b9b9956100aad4b821df82a38609de4c8f42f9d6f322a27337f4b418ab7349745953bf222a00", 0xd0}], 0x6, &(0x7f0000001640)=[@authinfo={0x18, 0x84, 0x6, {0xabec}}], 0x18, 0x44001}, {&(0x7f0000001680)=@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001a40)=[{&(0x7f00000016c0)="3dbfc0df2e28bb48e2e1b21ed57fa11556551f8ce61219e6bebe24555fe8eb157175e3f9837a1d353b52d3dcae4a2788bb83796e0ec93364e421316af0e23c57723ad403211ea3d3c26a0b0d155770131dcf96a183e297f1bf499d0fdc39398cab7f281aee63aa89f662b4cf2f44a7771c36dc", 0x73}, {&(0x7f0000001740)="447effa13dde98c8d3d6643a0baec53e26eeca80a2b67e891c801dbe0eb92d6197f69c0b6cabefce7fa70c6fab1118eb28a582fee7450fea9ae39c3a2af2bd1bb280feaca9140fdbdabe8d86c981de05a6da5f5f9351ea00bbfc3f05bd3b3dbcc5ce543ac13c0be3d3b017d933bdf1476d21c6003821e8215a83482f696715fe8e6baca98b14a723caefb7fc8a87169c02f57708491dd50ca72f726aafa4853ab4c9f4a994da0dcd8eddc67c2f6e70aff28168414ca7db35d5f3e1cc07d9bbed8ec023", 0xc3}, {&(0x7f0000001840)="d0fafeb4a4ca8468d38a1bc591bc510f0a5045c7734e04fb6cbb55ebd6c8a2dbc073f9a12deacc03a8cae80cfd7001896ce7ebfe1ceefd01dc7fbf7d665832c34af170133833d98be477755285d818b6018ff3bdf51343ea122578bcd718", 0x5e}, {&(0x7f00000018c0)="e1cfe3a7abe5687e5dc966b2c8cdc0c8a61a7e4929d58b393ca61e6bd96284667198bbd36a79e76a4c917e4fc95f0e00b522b4508f4af1c8fd8b06b045098f2d7b9ef20cee8d87b287616cb3844bee325d7cf20411f9a8c57ea206010bb626b7c3606eb6f2f70658deb748010ea935e95f44aa725a829366622b44ee4dfc6bc049439be38a1622edf994078916d49519da016c2df2d4f86d59f1643674922a71860072815e0dacbf4bc20fe2d7ac4b72fca0a7a60d6382e981c3267c2f30bbc0a8c48287332e3323280438cd89e6775b6188", 0xd2}, {&(0x7f00000019c0)="76b315c2b0a6cb21c6617157fc5c7400e8817cfab5facf3934e10e727a2b97b2a1e85518dc5a73b74308983ee765f7ca166409b5f93b27e32592c843f5edb23e4c694b164e89b04fd8a9f90233", 0x4d}], 0x5, &(0x7f0000001b40)=[@authinfo={0x18, 0x84, 0x6, {0x10000}}, @sndinfo={0x20, 0x84, 0x2, {0xffff, 0x6, 0x4, 0x7, r2}}], 0x38, 0x4}, {&(0x7f0000001b80)=@in6={0xa, 0x4e20, 0x101, @remote, 0x80000000}, 0x1c, &(0x7f0000004e40)=[{&(0x7f0000001bc0)="b6f4aa23b910c31ed2303cdc61990c3c8ba4829ee66c7b4583a1a1c654dfb3c7e8424a53df79ec8a194560afc540da7ab8656e967a4bcc0a48a1eac623ab4eb66fb86deb546f3cec58a43095791eeb763a2fc64c06c768d836ed36d8b36dd7f2f8e16263f445e93f4fcb26bce663084319e717c9a196464ade297bdaa46f0abbd8737b9705db0c261ef61b1b757271dd6e16c5c64e59dd055ab4fbc583205ea1d003c9bfe605c1e523d77f41f53333234bf9b1d84491e5014fb4fb732043ae612cf5b3e4f284382221e8cb3a3fce2001506a3844aa86ca90829932465035a9abc36e03c3ce6ae82da36696832618b3b030c746e1f9e1d8304eb2383b5c4f3a0c8ffd676db836a90d796722c84f01b389ae8053b8236e33786e617b2da45e2412ecd0ad11cc620a6e52722f2978db401f7b6d8d38853df6df8f2a3f097543e2e07cc41b954e3eac3bc03b98f01e016396b77e62a2d4b4b3e65eb227c4fbdb4a2f65882b320c4f0b04bcc10359c5ac02df7b0eb5f87ccf46566c419f1f2940556c798e7a413a2897b9cb3c362899ef32199daf20c709017cb4cd2c599d04f636975a9d478086f71e608c8ee22fe9ac24966e59ea411a488d10dc704d3257b7e4daee6dbf124a9c8e4275509c7def1af9a930662a95f265fe64b9d389b48f58ab7a7407ad41dce86e30884cb0964f062fe4d3a794968b115fd6dfe2b300ce3d663c60809ff0dbfb149e2ebff5fc2b4015d78dafa6fa35c61f5efe29c27973fecc45a93b284b8ff7fab966caa08b5e934a79993fcb362b165fc51f6d1aea12c2593f989c9dc7f636427f423f4d519c636706e56515e1a6a0e4a9e4a2204d122960198a62a21bb398d386179a8e885d0718d5d3e727129e88958fa55e8857387874ea21c6629571695a5f9bcdf0655f04bb0dd1e824f48d0732e05bb6035ad4e7a6a2d10a9b753646edd458fec1d2bcef6c71c621ea4e48eecf544dc367959dc19e1d78d0bddf860487dcdb022c34965ffbfdc2053661a991e66d6bf12a40edf9d5d11dacfe2f70fe8b1d5ad4efff26003519913acefb9bbaeec8e4831234b7aea700e89c667a9b4cf683ad5f23a9340260b2351159e381c0fc64522a33153fdaa142cd4194997e6ee84146ca63024793ff1cafe27fd2d259887c539911f0c1073f0ee79d0299a01443032cb6f04102c5728a06de7e96a8ce6790327a7ba9a1d76ff6044dd2cd184fad5e11066b704ec5b20e99dd1ac689e61041e892c832e7811a05a581f8f375a8f6e701d58701327998f057afffe7d36849e98adbd665a941e437d2ec7d72323942f31bf4a7215c377d5e2033ad7029ea2d4c867fc3bcae061fd1f9f253f69e53f28c16501c2c429fa0192b2ec83aaecd5af41e7b215674ebcb758b3c477189404ab2aaa219c3301f1372813e730731edb35949b372f3f55d9890b7d9ba55f2b91a7b57c6b3fbe0db451559d2de81c2295cd2f3fb927a6119dc4e1ff423a37f100272b4efa722303883d2a8f8d686fe7cd2a215d07ef35af20d74245c235cbb408a10c9042f61f7f1ec12b57b338dab00ea23e5e0b6bf7e6901d30aa5ce5992bd6c95502876a7e9b6aefda6aa47089437adac87d47fde6f1a0b5c49c229aabd84a0770c881e27c632fbb34471b72309d46e15551bbf9ac38cb8308df576f51e15e88b29d72d73c91048ca9de7cd231317e326953c41ba4abc5107c0c34f6108fc7145e7140820c4c7dbf3b92004f27f33e298ea9ea854a5b78ac2df8ec43aa4082df6c10fe1815a2ff99d5db031d578bb21a569adfcedabd6c1e57d1db3aa4e1fc10b570a862ee362ce5fb1a2270244c20e683ebe5c50bd7ef8bde517b164854a0638d5202f28d95c179e545656cd34667d6e63de30941c060aa17ea72847858a9a2c7604cfa5f4900c9faef358be17a9096e93db38e70f9ef1d4af1cf5cfdaa28397820889ebc1df1b37e46389501a8f21bfbf833eb6818bf97c3e3b44c6767d79f476ebd6c7716f37ba3ec995fb044501f4101d79e02f0640e251460a58374cd79bcb455cc2603616bf0f0b8b1fc385a61a06a580ce4a38074c176fb5e573c076f42d00ad9080fdcaebe5da89d947183e59d8b047efa2decd8175b114799a751be46e729fdace3ea7e171df7597a2edf1b7d198758ac23e67cb89db23630ebbae3c9911cf58252834e2192a8ddd947b6c488b1ac735340334c7510499c556374f24b85beb9ef05d9824ebae525f32df3f24b4f776a413a5d1a3db9cc8df0e7e1927107da260b42f788cdff1ae593438e3e3e0e9f8c5028d21c47869484b783224603547d719c254b44ba68d9db8f8367477921483ea059e2e3b2c080609611d01d5af67a56eef055da27414c14243491f8ec5f4df31ba7fe45c176226503b8e55caf8407e70d11b19f65d84d4b6592270bc7b8204db2b62092064dd641edd301bf6427c4c6a85f935aef75f784a1d216cfdc8acdf1caa8b5914ae0f85465de88f4be2f6d70e229d9111f32dd51e4d098b70ff2e0d6367866f34d7e8d494ad8a791b8efe0b3e9b0a0904b357ff367bf2e14479dbcb1a157730f5a5688b95da05c1535d933b8bfc10f7ede855f718f938cf39c360af91557a1f78b2b0e8f6675fd601339578d0d40c422f530c71419a2f2482d50d6b4d367614f6a9939bfd79f6433bee6717db28d0ecd266a06c8c0e869a621f91989498bb129a6358f22203ff6f4a97c23c5c461c3d829282d53b6fde8b65b4dffcc274f9a6db499c5b46ccdd7696929599d4c2c71f934f6f213dfa44fce9a631278e0fc3f0c8125354ae58dcb9f2c5056ec6ba4799ee84ee2e7fadfeefda7a8033cdf57e7574e93b25efc79616e2e99f74518ce24598dd430a898b5fdca0695bd607156380e358fe850d6b25a457b65cf06d9a7d457e406208981a53a480c00fcd5677a2572074683d72f7f1e70e45266b4b17df6216d02e41d3ae195f9904a583de6ac9926c9ffdcf918e141c3eac623b7ecffd5c915728478ae45916a799a8203b0f3bd8cc0a777080fc496cbd94a46691766b592d2137713079e53fce56b69c4cdf5c983dd7ff66c2c35daa53be0b2f88f231e0fe48b5b72402422324420e66500118bf181e5a61e3b988069be3563fb0f2ed8686cdf8f6907eafc1567f8b5b9b62e38b97fc97bb99701ea532307e4aeae3c30e9756af0c4de5cd534c0748ef7365e882c6f78bf78f9cafd39e4220ef22d35321ea88aa7e6938e725dbd6c9d12ed1703f5cfa04944517e12ad4e0e8cca8232e59de672db4de2fdbe220daba381ccfa49eaa5ca481e5c8354ae7fd0c7a524fac514f80ecb25b9363efafbb244316d671f3112555759fbc3e64418fdcb4a57cfcdb8699751b1c9b19851c6cb9c6a3043f3133792cbdf4145e74a5a6a5e7bb4519408b240aadeb72de8de5985fbe7b08a760fe96adcd4b353a399c629141995dd64a8193ce185ffb93976db46e9c850312aa92ae30ab1f84d84357b9bbdf3b5d44471325909cfc13de0bdca84ea3762707e3301969f56f86c2ebafbd9766836c4eb6f2386824c91f0b81c4c3c913e3a5f55e71ef49d20f4c5417eb0e44a53690a26b1448ccc6676e2815877e3ee2631c792f6a87e4f14a46ae7db871709e93f5f0038fcc1c418e8a14cad0060776dc6b13f76c32bcdb0cbbe9cda8254981f263699223998a242ee3b710c56730da70d1c5203a8aa6db7af2aa46d94f2f76cff81b09d15430de01fe98dece9d66e3c909fcdf34841e8286423f713b795d2661214abd719682c4d748b9de34b473fc5e5e9d39b4f3617ca5dd59edd20c04aad65b6bbd302dd7817b6594d33e42e670ab62f042e97f6260a67418d143d0f0ec6c825fa301bbf5bb90789a80dd00daf6ee773510528a951098467f9c9f800fe01ae2803404678b996f55c69141655ae446e0058c8ef19e2be726ca5e3fcff252051485f3a727a76dd45170785af97594a74e4fbb8a6fa9b080f075c4f8debdefd450a200fc637d746ffa0705fd43cc0b00778188002787b5b2ad2f46fb4f50f1599f79ab4d1c3e09c1d90f35d4f014bde6dbe62f89ae901ac0deb75652e55653adc3f2afa9e5080f146117851da2205e4740387804d5e975f5e2286dbfb66a0e06f762db476138fdb26224604cf6b179f605bff5191617678c0c93a0db412ec54b0aafecbaa1a6bd1008cd09a8f7501a80474e7ce386a3763dbacad6631af68ceca83e76dc5e9b7ffbc0f9343dfd9793f1abb4921d2e78ead0eeed402682e7953c08b7c0345c38818277d36535ff3f8ae8c1427ecbb234d6cfa98f62f3d3a7f3411c2a87205c0afe267abd3813ad6c775518be18a1d8d2c7f2ad95c73215d8b0f2eb9662e11a0ba6c35efb516d47823416db34d31a6659edfb32e5b7c294aa4f784f2d73c1684b50d5bd2ff409c46334974efeeb9b96ee4d5516f1fa4318964b4d8947fb775674f788e8f33fd491c8ba6f27f25d368ed75355c2dfd0f78d41b3543843c744201778ff0aadf973c72c46791aefce0d033d44b89b2fcc859578a4dd6098e28ea43a464b441c58080c1c9e97112bea77607d21afba4fa658d86e20139c5020d11364a474d5999874c9fdbf95e98772fafae122c13b3135ad9b24f8b43b6826289ff250338acd22f49a7e45f3d9426cb496d9dd5fdc64a67139a915e5547f73aca233b03b647dcda5da435356325f130682bdb0723e4c0109039ad8fab5bbc0d49793633f8d2d72c80c0bc72728fce9ec772aa4ec42fa9bd27c279c169610393aa5ffc842c2c3261c1c78f0307ddcbb655f933377a01c6fc3fc1768481d41a5124204c39fc68e4bf4b8ad3d9a9c45d26a2107f4e7feacec1d92809d0b1227efc0b403474d5dc7dc13c399412bd5c143efcbd6c9252f50a848c4b985e6f3c53ceb4b0cfe1ec7d004bd9a525e80c48f22911fbffb24029b6f3e5f5fca6289c0d5d0806f9182c7406d497837b6604b1455f5bb895a879d42584eded804b7f8c5ced332f89384e69c7d2c5f141afe7431823c40067f5cc62aa8632360ca50a3c5fc0d5b53eae62ce50d9ec2532a5c34d163f94f19706a063ae0e79b6630fb94a83b72a101b9706c728afea0978b84ae47d8ee4d8163512dcd54f5afa247cfdfe9304624f8ad1bc0a82f9a1106105e5815dceb6f7bcf72d124b7f9c410ba0d5a05fc186f5db9ae35d82f1d30746c810736e37de509f770348dc161cd699f2931ff26ec75c8ca53e34f19339fc697783fe542561aa1ff7933148a71be131191594982ac3a1cac8755235a6dabf850d4e4df61d3d99962140fc2141d53e59fe8c7bf0778061747e417427000061acff155e6f763a7d3c553629737fa8a2c8beea31359760d3389643496b61f7a25511ea6c7d2d11077b12fb4b32113a403f27b9657c027778652c4791f33b480c2f7db7c8e3c5d8a7d03a535d23ee50ce266c6ad54a3775ef48e45039eafa9e55bfc1a8206a33653c3c3f5a2a2202522994cc7ecd47077e19db4ed1e4fc2ee73f59621114b9dc62002578a7f6719684427eb65ddccc27e1e1fb733ef9fc9913d1866ec6c6d0b7ed520d0f8fa36e233b7086e213cc70a7a104849849ea755ce6d9590c7251aeb9d1719b50d4d7f22965b3cdc2e897820e755e2e4c13c5931a7eaae438f6d14aee2406e934ca3c4e7568414406e1689f2a4d89c3928a35bb7cdcb91803c2e9a292980faff4691045f0281a325e11945a7ac66ee21221b3eabfb93cc5861b0e702244cd759b8b4ddde7ad8000b45e4e3b21edd0f957900b870bc650384b70ab9e8df", 0x1000}, {&(0x7f0000002bc0)="545fe85d93144a24809c515ebccc1c00cae6a21cb71dc243b1db024a5e00b87b2b885bec8e81e913f4df51dad52ee748aa9120ce803a3d97c0f86f11b17e61f97b18c7b3e64e3e453ae60e59f91a0ae884708c05dcbc6e83203640c612988e89bd6ecf8665f86d13fa95a7e0ad808f903d6a843582ca428c1c6915b657fc749a7751f29c0571b56570b056601096c53575b57d1a339c6b9a354465648f632455b6e5f453f5b7a4bb9d94", 0xaa}, {&(0x7f0000002c80)="40fa1cc825d2e117cbf19548a4f907d8aecf0d6eb665bc84366bbab13b55", 0x1e}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="b3536e9c62e418062b648c3edef2052a7f97fcd16e5c9f054a8ade6896995ae16c360d11430e8a02fd43bda821ffee257cb1ce248e667c9b20f0805747022791d9e27ad599794faf38150210e4a643bc9347691c57c24cbc9c523c0d850400df7b8a238a9132a3bc95b88a2e04afbd3504b41eda694c32c4ddc80f6b79a80fa09616870191ab8c3ebe20a5dbd9c1036326c3d4047b42afafe6597578f58fbf9f", 0xa0}, {&(0x7f0000003d80)="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", 0x1000}, {&(0x7f0000004d80)="50b70d54aa2b47e823d6a912d7f53a574fe0641804b138b6baf3d21cb43130ef2fff8a5697de07da759c98b9c10995f88535409f1545edff37a96ac9405022aad05ab7d86e49b913405a81b36f55ca55ee6f068000bba33a05ae0ac25c85dc2732f52aa6144d3a1db0d1f4b1971ca6bd11720c5f3b4745064777e0382392c7d120afe206f4f241d5", 0x88}], 0x7, &(0x7f0000004fc0)=[@authinfo={0x18, 0x84, 0x6, {0xa79}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x0, 0xfffffffffffffd23, r3}}], 0x50}, {&(0x7f0000005040)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000053c0)=[{&(0x7f0000005080)="f5fedf00c0a9688f01b1afca22f2fc8f3618a32e35055bfd9b3da3a5ceedd826ab97735592bbde0ea660f799c40d7090a9cf29e1909effc1e24fddf6331ee4800be3d68f87003c17ab560e2839497f77de0615020565204c83d1bb354d2ec134aa3b1a788848381b676d0a8c4aeaa856b57923fce421d455ab02", 0x7a}, {&(0x7f0000005100)="3cd866467c69f714e053c39b72f5c2a3b4c6d114f53bb16baba465e9f08476ea0653e8f9f6db03d5aab085fa390494f7cc29b359015d4cad0cadad290efab3563bc242a93df3d82be65c552fe1dbd547ad75f090c58cddd3e852df0551bae4c886a4cbb665728aaa779e9bf134d7e45c05d933e83e1b52d7d7d527b53455c4df178dcd3f484893da28380c836d9d74deaed1014cd449ef48d8078edf", 0x9c}, {&(0x7f00000051c0)="b27e3e9655231a90ffbe2ceca41cc1cde0f4e4c7aefb4f81aa3ce626f7ca37a1ab9c02aae7f9b08df9954f38789c42b013e75014703be361e51edf43f120f2a7e1fb53146f643b55a21baa0e4cba7b25ff8e7fe4de7a96d151f792f22ea7c88c40ba4073aca3e82a7de5dd788fb1b0cac6f8c2b48e7972939d282e8ee04b44e9743bd16d8f25684811a6f3ea6b316765ae0e991bba19a5bd0ac99df15a564eecfd15f84ec045ce310aa5ec10a4d371227cae36dd7e352eba87c5fe0b22d9d7f6a28b9cd5e207b1b412fe51bf91b2452286b6588dd0bc39fd92b8cf46419b608de1f4a0d9d06e1d384fde8b13d8765a", 0xef}, {&(0x7f00000052c0)="c3eb5618571505cdfb8170739151bfaa4086b206e2ae1f6f56a389cb5df36f6b44315d62dea750bd45450142ce0c4c3d85977c776a8e4c8271187bc9d13354f7bec87064416dcd5db259c55e09f3a036614513503ba30a4eaee1f5a0ea149ade8a892d1393715bfd18464bf05f4a13d7b42a7c52d0288d2f06385326418d99b04ae942d58479c87ca6bfc76da7e3e9aa79cd976508f994da3fdae4ef737e33f4b2b073a5286dad31f276bc2766b59470424356d4922e0642e5045f65e399d6a66cadc7e442b253defa981264d70e5f54147c5ae72c439bda88997e189c7bab695db1cb1db91c5fb7633bb016283029da9f5283", 0xf3}], 0x4, 0x0, 0x0, 0x810}, {&(0x7f0000005400)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000006900)=[{&(0x7f0000005440)="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", 0xfc}, {&(0x7f0000005540)="45349920ce322e6e5259683fa95fc570300d308894f6a65ef340b3a257037847fa6d45043b42ea649c0a7cd8fdf2f6b4e832e10e3a6536dcd2a007b8d1cc7f41ee369ad3da660820b20042dcf3d01921f136839ca7512fa40ecc1b1667cefce99187daa958b59292e2f8eab5fd0b5ff4d2b56659adfbfe08d70ad2428beff45075cdebff3019097ec38f1cda905a20fdd78dd1c7d4be1ce4e864cb97246031dbc0717b7d66febdf12c7ed23a451ed03dc65413d0e6eb303404103635a72057c8a09e8b2f9081603df73ed0748e1634132cd1883aeeb48bd5", 0xd8}, {&(0x7f0000005640)="eed629d73c3eef1ef7f1a6174880efa108fec60fa3aca44d5858413605682c4a92ffa013fcb5c85df6d3cd104881054c2efe57700dbe4a93fe046809d4da00214d815cb2a46bc820945fa255fa736f9b9bce9a9f53d094ec5ea0b6ed54", 0xfffffffffffffcef}, {&(0x7f0000006b80)="9a911952ad1823e3f7376a8e117c2423b378e074c17fb8b6e10333c014c8acdb7097be1416aca55856c6570f92da7cf56408eaca5e0cbceb26f131b4c82db3452899b3a2d2442ea9a909d375123fd3a1a12f130ee3a9ad48c4265b2b30ef3164b4a4d2bf42a8fddaa2558509feaae574848f40f63645f738de504e9f2f29db982f7ac99be31a54a51c60837e08a9e3bd7ed93a50dfb25e0098ecd0c057dd5a649c48097ca86a2ad41202dade2730d0e350515538eff25d4c2914ac71500769f81cceecde83c1dc9f24efaebabd0e8b40f98dca286a", 0xd5}, {&(0x7f00000057c0)="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", 0x1000}, {&(0x7f00000067c0)="624932febb36093af545d3ed32f47974a34e1ca4e11868b21691053b8737605abd12ecf1978dec28d194b608a57c9144cf8ec4", 0x33}, {&(0x7f0000006800)="a158e49635febbea9e5211d20bc22a578e929ee33bfd333c142922c15b5db5c51f0db1878c7ed52d7c72b78a3d2841a121ec975c9af2409e7da7fd8119fa67c1d7ba62a0718fae0cbd58980a7d15155f8197dbd9a8db755bfc427e66dce70a6612c38b676cbc91dee48a07cf415ecf3cce1a1c00f575c76e8cd6cebb2fd405f941bd4de3ab4d696c33c7b30351111e3881ea764db1dc99cca10f4723e296d92a58ab7f591cb24d38d7fec1a2f35c6d19769d469d4b959f1c9d2db902ad009a039c1740a237f7ed8734a3", 0xca}], 0x7, &(0x7f0000006a00)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x4, 0xffffffff, 0x2, r4}}], 0x38, 0x14}], 0x5, 0x800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x40, 0x0) dup2(r0, r5) 06:49:06 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) 06:49:06 executing program 5: [ 291.322061][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 291.322074][ T26] audit: type=1804 audit(1554360546.860:125): pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/204/file0/file0" dev="sda1" ino=17310 res=1 06:49:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x900, 0x8080fffffffe) 06:49:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x02\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0xffffffff00000000, 0x10000}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x800341, 0x11, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000000c0)=0x1) fcntl$setstatus(r1, 0x4, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400, 0x0) 06:49:07 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x31f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:07 executing program 5: [ 291.548190][ T26] audit: type=1804 audit(1554360547.090:126): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/205/file0/file0" dev="loop1" ino=40 res=1 06:49:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xc00, 0x8080fffffffe) 06:49:07 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 291.700830][ T26] audit: type=1804 audit(1554360547.090:127): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/205/file0/file0" dev="loop1" ino=40 res=1 06:49:07 executing program 5: 06:49:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x03\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:07 executing program 3: [ 291.837125][ T26] audit: type=1804 audit(1554360547.380:128): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/206/file0/file0" dev="loop1" ino=41 res=1 06:49:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xd00, 0x8080fffffffe) 06:49:07 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 06:49:07 executing program 5: 06:49:07 executing program 3: syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0xfffffffffffffffd, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 291.960114][ T26] audit: type=1804 audit(1554360547.410:129): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/206/file0/file0" dev="loop1" ino=41 res=1 06:49:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000209, 0x1, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xa) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f00000000c0)=0xc) dup2(r0, r1) 06:49:07 executing program 5: 06:49:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x04\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf00, 0x8080fffffffe) 06:49:07 executing program 2: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 06:49:07 executing program 5: [ 292.233499][ T26] audit: type=1804 audit(1554360547.770:130): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/207/file0/file0" dev="sda1" ino=17307 res=1 06:49:07 executing program 3: 06:49:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x6}, 0x28, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x1, 0x402000) ptrace$getregs(0xe, r1, 0x80000001, &(0x7f0000000300)=""/85) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0xc3, 0x8, 0x162f, 0x100000001, 0x0, 0x5eb3, 0x20000, 0xb, 0xbc3c, 0x6, 0x9, 0x8, 0x100000000, 0x6, 0x54f, 0x4, 0x1, 0x20, 0x9, 0x8, 0x80000001, 0x1000, 0x7, 0x0, 0x1, 0x1, 0x6, 0x0, 0x7, 0xf75, 0x7, 0x40, 0x0, 0x1, 0x7f, 0x7, 0x0, 0x80000000, 0x6, @perf_bp={&(0x7f0000000100), 0x4}, 0x200, 0x8, 0x1, 0xf, 0xfffffffffffffff9, 0x17, 0x6}, r1, 0xd, r2, 0xb) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000380)=0xe54, 0x4) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000002c0)=r2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) [ 292.335755][ T26] audit: type=1804 audit(1554360547.770:131): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/207/file0/file0" dev="sda1" ino=17307 res=1 06:49:07 executing program 5: 06:49:08 executing program 3: [ 292.492693][ T26] audit: type=1804 audit(1554360548.030:132): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/208/file0/file0" dev="loop1" ino=42 res=1 06:49:08 executing program 2: 06:49:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1002, 0x8080fffffffe) 06:49:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x05\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 292.607880][ T26] audit: type=1804 audit(1554360548.030:133): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/208/file0/file0" dev="loop1" ino=42 res=1 06:49:08 executing program 5: 06:49:08 executing program 3: 06:49:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/ion\x00', 0x28000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000a00)={0x1, 0x0, 0x103, 0x1, {0x7, 0x7, 0x12d5, 0x1f}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000100)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x200040, 0x0) membarrier(0x30, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000140)) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000a80)={0xe, @vbi={0x4, 0x1ff, 0x5, 0x30314752, [0x0, 0x5], [0x10000], 0x13a}}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000008c0)={0x0, 0x23, "b98d2ee337c7be0db9fe873c323c604a02dafc25a25bfb57b1365316fdffeb52873999"}, &(0x7f0000000900)=0x2b) sendmmsg$inet_sctp(r4, &(0x7f0000000980)=[{&(0x7f0000000380)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="67cf53a5ab6f414bb921729e456460eef435e6f042f8436f243c1078010640ff584b4a71b067f942a7680afe935b39f748a9341022726612d50aeb0b87eaf832854584fc2ce23dd9e0d79d81afed6a7a5c0e8cb51e832861a430ab1e27a301559313279891d7f1c65d896a9e97b74c21095dcff69631c689278100828fe22f48f134d143e8eb3f3ffc40682bd0bd5c889aa5e655e6f3d4c39f66f6984ee0ec613870616900973c0e2812fa5e6441384800154bec0f1f6586e6a4a3612e7fa99ef2052cdc1ccd68d0924306402ac7b651e169aaa087772c53e6e077e492a4fce85b389376874270aa0849bb488e22fc7663", 0xf1}, {&(0x7f00000004c0)="1b3265936c59a8", 0x7}, {&(0x7f0000000500)="dcd7a8a79d023943fabd4adfd7dd16d6bcc7216ba4acd02a4723f65236e7824cfb575196fb0d83e6dca1c9855b4f1becea66b2456cdd80f74eb0de3b8df52c35fefdbccfb46f0b5e54136aa615531221f7cfa1596d60db33de31e002272d76a3ad96cb98902aa20388a401b615e8557404a2d3650980a9f41a09ea27bddf62af2438848b7828625487d62b64efc81ba044298bdcfb", 0x95}, {&(0x7f00000005c0)="8c5c26b25442ea54fa9bc49bb663c44a797d9ea0b7d53fc2ed9fd1dd3c23fca4d8919e062e5dfec50072ad1223cae9bb511b4a2a10dd02e6ea462aa3c75df29e554066c5e16788059f9e74da0ebd39874e918e0bd430bca7a416a94368f5e1f50cf2a2e71d06dc3e211733fcd33dbd6a82734e336d132635552f72639d0fc849e09cb51ce8439618e8cec4ef13c05bfe7c75a16305831910b99d5dd394c2a046f7551af92ceb775c66b34e6f7a5706d290e1633077fffcfe89ebe648aa7c5f1b1cf54bfa6ac61a8b135e9ff5ff18cf1d7e975352a16c91d792a1cbb189d3", 0xde}], 0x4, &(0x7f0000000700)=[@dstaddrv6={0x20, 0x84, 0x8, @local}], 0x20, 0x20004080}, {&(0x7f0000000740)=@in6={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e0167077b214d2c96e10d827a912b76d34c333043055cf57aa5050d5e7edac1eae49bede78401780b3f976cefbee6a361b08a5c6154be70ad07c09b9fcaf45789d4aaca0c0322edb7bfce7af4831dd5180cef0b225e58d39435b30f4", 0x5c}, {&(0x7f0000000800)="edf885a32210a809dd870bac698c1e0334049d4681481587212c7ee8e25d23f06818f1949c92cfd447359f3fb9dd301973e0bc5c120b4d69c9386f8f9b38885163551947982715f914d5f1", 0x4b}], 0x2, &(0x7f0000000940)=[@sndinfo={0x20, 0x84, 0x2, {0x6e, 0x207, 0x1a70, 0x2, r5}}], 0x20, 0x50}], 0x2, 0x84) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x2, r3, 0x2b, r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x4, 0xffffffffffffffff}) sendto$isdn(r4, &(0x7f0000000b80)={0x3, 0x3, "000bdeb330a81fc651ea0947952f93122da0f68e83bd666f9985a61723dd04fdcebf8ce2d8ef0d5233722a8cb6cc895f53b154a136"}, 0x3d, 0x4, 0x0, 0x0) r7 = dup2(r0, r6) ioctl$EVIOCGBITSND(r7, 0x80404532, &(0x7f0000000200)=""/135) 06:49:08 executing program 2: 06:49:08 executing program 3: 06:49:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x06\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:08 executing program 2: 06:49:08 executing program 5: [ 292.936639][ T26] audit: type=1804 audit(1554360548.480:134): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/209/file0/file0" dev="sda1" ino=17324 res=1 06:49:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1200, 0x8080fffffffe) 06:49:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) setfsuid(r2) 06:49:08 executing program 3: 06:49:08 executing program 2: 06:49:08 executing program 5: 06:49:08 executing program 3: 06:49:08 executing program 5: 06:49:08 executing program 2: 06:49:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\a\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1803, 0x8080fffffffe) 06:49:08 executing program 5: 06:49:08 executing program 2: 06:49:08 executing program 3: 06:49:09 executing program 5: 06:49:09 executing program 5: 06:49:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x80000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:09 executing program 3: 06:49:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019001200e60100006c000000000000000200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 06:49:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001740)=""/230, 0xe6}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 06:49:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) [ 293.659471][ T5651] EXT4-fs (loop2): Can't read superblock on 2nd try 06:49:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1f00, 0x8080fffffffe) 06:49:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffffc, 0xc, 0x1, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, r1}) dup2(r0, r2) 06:49:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="3edfdf6567360fae8200400000440f20c0663502000000440f22c0f3a70f0666b9b603000066b8f98a7c5a66ba5e232f580f300f23a2ed64f30f0d960090d1ac0000", 0x42}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2400088}, 0xc, 0x0}, 0x4000) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:49:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001740)=""/230, 0xe6}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 06:49:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) setfsuid(r2) 06:49:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x2000, 0x8080fffffffe) 06:49:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x800339, 0xa, 0x1, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000040)='/dev/ion\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x6, 0x4, r3, 0x0, r4, 0x0, 0x100000000, 0xb72}) dup2(r0, r2) 06:49:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x0f\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xd, 0x4002000000020a, 0x1, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000200)=""/158, &(0x7f0000000040)=0x9e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000100)) dup2(r0, r1) 06:49:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) socket$bt_cmtp(0x1f, 0x3, 0x5) dup2(r0, r1) 06:49:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xd, 0x4002000000020a, 0x1, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000200)=""/158, &(0x7f0000000040)=0x9e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000100)) dup2(r0, r1) 06:49:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x2004, 0x8080fffffffe) 06:49:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00H\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xaf}]}, &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) timer_create(0x0, &(0x7f0000000140)={0x0, 0x1, 0x2}, &(0x7f0000000200)=0x0) timer_delete(r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x14300c, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x60002) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r3, r3) 06:49:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 294.345542][ C0] net_ratelimit: 22 callbacks suppressed [ 294.345551][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 294.357045][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) inotify_init() bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) dup2(r0, r1) 06:49:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r6) [ 294.505560][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 294.511383][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r6) 06:49:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x2805, 0x8080fffffffe) 06:49:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00L\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r6) 06:49:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000140)='team_slave_0\x00', 0xd, 0x0) dup2(r0, r2) 06:49:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x200, 0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0x7, r3}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x40c00, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") r6 = getpid() kcmp(r1, r6, 0x0, r0, r0) r7 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xfffffffffffffb88, 0xa0000) connect$l2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x2, 0x0, {0xa, 0x4e23, 0x3, @local, 0x75}}}, 0x32) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r9 = dup2(r0, r8) ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f00000005c0)='vcan0\x00') rt_tgsigqueueinfo(r1, r6, 0x7, &(0x7f0000000280)={0x17, 0x2092, 0x9}) 06:49:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r6) 06:49:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r6) 06:49:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x400) write$capi20_data(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x235) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00h\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x3f00, 0x8080fffffffe) 06:49:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r6) 06:49:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) dup2(r0, 0xffffffffffffffff) 06:49:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:10 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000100)={0x7, 0x3, @start={0x80000001, 0x1}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) 06:49:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x4000, 0x8080fffffffe) 06:49:10 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x460100, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='lapb0\x00', 0x9, 0x6, 0x6681fb3f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r1, r3) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000080)=0x7fffffff) 06:49:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) dup2(r0, 0xffffffffffffffff) 06:49:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00l\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2081, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 295.385532][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 295.391461][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x180) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000207, 0x3, r1}) dup2(r0, r2) 06:49:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r5 = dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) dup2(r0, 0xffffffffffffffff) 06:49:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5300, 0x8080fffffffe) 06:49:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000c00800000003000000010000000200000005f1ffff760400"/48]) dup2(r0, r1) 06:49:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 295.545534][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 295.551368][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00t\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) dup3(r4, r2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r5) 06:49:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000c00800000003000000010000000200000005f1ffff760400"/48]) dup2(r0, r1) 06:49:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5600, 0x8080fffffffe) 06:49:11 executing program 0 (fault-call:3 fault-nth:0): clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:11 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) dup3(r4, r2, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000037f, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r5) 06:49:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00z\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5800, 0x8080fffffffe) [ 296.025528][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 296.031344][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 296.055792][ T6921] FAULT_INJECTION: forcing a failure. [ 296.055792][ T6921] name failslab, interval 1, probability 0, space 0, times 0 06:49:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x4) recvfrom$rose(r1, &(0x7f0000000200)=""/180, 0xb4, 0x2, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0xedb5, 0x10, 0x1, r2}) [ 296.116421][ T6921] CPU: 1 PID: 6921 Comm: syz-executor.0 Not tainted 5.1.0-rc3+ #50 [ 296.124370][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.134604][ T6921] Call Trace: [ 296.137906][ T6921] dump_stack+0x172/0x1f0 [ 296.142248][ T6921] should_fail.cold+0xa/0x15 [ 296.146855][ T6921] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 296.152691][ T6921] ? ___might_sleep+0x163/0x280 [ 296.157572][ T6921] __should_failslab+0x121/0x190 [ 296.162520][ T6921] should_failslab+0x9/0x14 [ 296.167039][ T6921] kmem_cache_alloc+0x2b2/0x6f0 [ 296.171993][ T6921] ? kasan_check_write+0x14/0x20 [ 296.176915][ T6921] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 296.182446][ T6921] getname_flags+0xd6/0x5b0 [ 296.186949][ T6921] getname+0x1a/0x20 [ 296.190826][ T6921] do_sys_open+0x2c9/0x5d0 [ 296.195225][ T6921] ? filp_open+0x80/0x80 [ 296.199451][ T6921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.204890][ T6921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.210327][ T6921] ? do_syscall_64+0x26/0x610 [ 296.214999][ T6921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.221117][ T6921] ? do_syscall_64+0x26/0x610 [ 296.225787][ T6921] __x64_sys_openat+0x9d/0x100 [ 296.230533][ T6921] do_syscall_64+0x103/0x610 [ 296.235105][ T6921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.240985][ T6921] RIP: 0033:0x4582b9 [ 296.245297][ T6921] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:49:11 executing program 0 (fault-call:3 fault-nth:1): clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 296.264881][ T6921] RSP: 002b:00007ff466e82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.273294][ T6921] RAX: ffffffffffffffda RBX: 00007ff466e82c90 RCX: 00000000004582b9 [ 296.282141][ T6921] RDX: 0000000000000200 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 296.290187][ T6921] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 296.298142][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff466e836d4 [ 296.306093][ T6921] R13: 00000000004c41f6 R14: 00000000004d7a00 R15: 0000000000000003 06:49:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) dup3(r4, r2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r5) 06:49:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WIE_OFF(r2, 0x7010) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x8e, "13b41c3605a08a895879e39be7c9dbaf5a7b6170697a7b9da3a4d3ad3c8077b6875219bd733052e85bea9752743084606d8cb855270a118447ad21f788d5b7388bbfcc6f8abf098c66686c9dd3d81b4f16bd2ebff5273f08b1e6c1b6783ba6a5a4d381531909fae346e41b07bb8e58e415dd4853527c2c63b105a3c45c67c72e1f75a4b4f9111011542121713b85"}, &(0x7f0000000040)=0x96) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r4, 0x7}, &(0x7f0000000140)=0x8) dup2(r0, r3) [ 296.502698][ T7151] FAULT_INJECTION: forcing a failure. [ 296.502698][ T7151] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 296.515946][ T7151] CPU: 1 PID: 7151 Comm: syz-executor.0 Not tainted 5.1.0-rc3+ #50 [ 296.523846][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.533908][ T7151] Call Trace: [ 296.537210][ T7151] dump_stack+0x172/0x1f0 [ 296.537233][ T7151] should_fail.cold+0xa/0x15 [ 296.546155][ T7151] ? fault_create_debugfs_attr+0x1e0/0x1e0 06:49:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 296.546173][ T7151] ? __lock_acquire+0x548/0x3fb0 [ 296.546195][ T7151] should_fail_alloc_page+0x50/0x60 [ 296.546209][ T7151] __alloc_pages_nodemask+0x1a1/0x7e0 [ 296.546229][ T7151] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 296.573195][ T7151] ? find_held_lock+0x35/0x130 [ 296.577970][ T7151] ? find_held_lock+0x35/0x130 [ 296.582749][ T7151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 296.588569][ T7151] cache_grow_begin+0x9c/0x860 [ 296.593340][ T7151] ? getname_flags+0xd6/0x5b0 [ 296.598031][ T7151] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 296.604277][ T7151] kmem_cache_alloc+0x62d/0x6f0 [ 296.609146][ T7151] ? kasan_check_write+0x14/0x20 [ 296.614077][ T7151] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 296.619640][ T7151] getname_flags+0xd6/0x5b0 [ 296.624155][ T7151] getname+0x1a/0x20 [ 296.628061][ T7151] do_sys_open+0x2c9/0x5d0 [ 296.632587][ T7151] ? filp_open+0x80/0x80 [ 296.636838][ T7151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.642306][ T7151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.647776][ T7151] ? do_syscall_64+0x26/0x610 [ 296.652462][ T7151] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.658535][ T7151] ? do_syscall_64+0x26/0x610 [ 296.663222][ T7151] __x64_sys_openat+0x9d/0x100 [ 296.667998][ T7151] do_syscall_64+0x103/0x610 [ 296.672601][ T7151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.678498][ T7151] RIP: 0033:0x4582b9 [ 296.682451][ T7151] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:49:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0xf74e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x5ffff) r4 = dup2(r0, r1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fstat(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) r10 = getegid() fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x2}, [{0x2, 0x5, r5}, {0x2, 0x5, r6}], {0x4, 0x7}, [{0x8, 0x5, r7}, {0x8, 0x4, r8}, {0x8, 0x2, r9}, {0x8, 0x0, r10}], {0x10, 0x4}, {0x20, 0x6}}, 0x54, 0x2) 06:49:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5900, 0x8080fffffffe) [ 296.702060][ T7151] RSP: 002b:00007ff466e82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.711008][ T7151] RAX: ffffffffffffffda RBX: 00007ff466e82c90 RCX: 00000000004582b9 [ 296.718993][ T7151] RDX: 0000000000000200 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 296.719001][ T7151] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 296.719007][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff466e836d4 [ 296.719014][ T7151] R13: 00000000004c41f6 R14: 00000000004d7a00 R15: 0000000000000003 06:49:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 06:49:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 296.719672][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 296.719684][ T26] audit: type=1804 audit(1554360552.050:153): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/220/file0/file0" dev="loop1" ino=50 res=1 06:49:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="255e09d20bdacd5df1b8c5db8b0d7b2f29c9cc518925b1b1c2551f28669f53577b4b353d54e1fd74d37fe4bb121c7937824ff795f083642e4815f47148465672542e375593fe1b78e2a37f2cbb8159c6a1659731ec1b695ea8cbe47358df6c3891ba90450549b1ffc2b60fbeb760b2f36a01e5e9887fc2f3aef02d63177d6e8302bd8d52cf9e86ab51e0fd5d55de070076f8ce1aff3c64d0c081c22b581052242f335b6f45a1dc8fb4e2aafda981d168ea0374e2b97d0ecda8f5e35e884c45fdb5b0583cbb10aacb3500adb6f5d81677c373e767b1289e96a98388beb5e54107468af71c6b8876e1f7dea9d6"], 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 06:49:12 executing program 0 (fault-call:3 fault-nth:2): clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 296.830855][ T26] audit: type=1804 audit(1554360552.090:154): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/220/file0/file0" dev="loop1" ino=50 res=1 06:49:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:12 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) [ 297.113934][ T7630] FAULT_INJECTION: forcing a failure. [ 297.113934][ T7630] name failslab, interval 1, probability 0, space 0, times 0 [ 297.156906][ T7630] CPU: 0 PID: 7630 Comm: syz-executor.0 Not tainted 5.1.0-rc3+ #50 [ 297.164849][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.174917][ T7630] Call Trace: [ 297.178229][ T7630] dump_stack+0x172/0x1f0 [ 297.182578][ T7630] should_fail.cold+0xa/0x15 [ 297.187965][ T7630] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 297.193785][ T7630] ? ___might_sleep+0x163/0x280 [ 297.198654][ T7630] __should_failslab+0x121/0x190 [ 297.203614][ T7630] should_failslab+0x9/0x14 [ 297.208144][ T7630] kmem_cache_alloc+0x2b2/0x6f0 [ 297.213055][ T7630] ? __save_stack_trace+0x99/0x100 [ 297.218178][ T7630] __alloc_file+0x27/0x300 [ 297.222607][ T7630] alloc_empty_file+0x72/0x170 [ 297.227372][ T7630] path_openat+0xef/0x46e0 [ 297.231947][ T7630] ? save_stack+0x45/0xd0 [ 297.236258][ T7630] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 297.242051][ T7630] ? kasan_slab_alloc+0xf/0x20 [ 297.246795][ T7630] ? kmem_cache_alloc+0x11a/0x6f0 [ 297.251798][ T7630] ? getname_flags+0xd6/0x5b0 [ 297.256453][ T7630] ? getname+0x1a/0x20 [ 297.260502][ T7630] ? do_sys_open+0x2c9/0x5d0 [ 297.265075][ T7630] ? __x64_sys_openat+0x9d/0x100 [ 297.269993][ T7630] ? do_syscall_64+0x103/0x610 [ 297.274752][ T7630] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.280806][ T7630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.287035][ T7630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.293267][ T7630] ? __lock_acquire+0x548/0x3fb0 [ 297.298183][ T7630] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 297.303545][ T7630] do_filp_open+0x1a1/0x280 [ 297.308051][ T7630] ? __alloc_fd+0x430/0x530 [ 297.312549][ T7630] ? may_open_dev+0x100/0x100 [ 297.317211][ T7630] ? lock_downgrade+0x880/0x880 [ 297.322051][ T7630] ? kasan_check_read+0x11/0x20 [ 297.326885][ T7630] ? do_raw_spin_unlock+0x57/0x270 [ 297.332001][ T7630] do_sys_open+0x3fe/0x5d0 [ 297.336409][ T7630] ? filp_open+0x80/0x80 [ 297.340738][ T7630] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 297.346264][ T7630] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 297.351704][ T7630] ? do_syscall_64+0x26/0x610 [ 297.356363][ T7630] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.362409][ T7630] ? do_syscall_64+0x26/0x610 [ 297.367084][ T7630] __x64_sys_openat+0x9d/0x100 [ 297.371936][ T7630] do_syscall_64+0x103/0x610 [ 297.376601][ T7630] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.382471][ T7630] RIP: 0033:0x4582b9 [ 297.386349][ T7630] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:49:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5c00, 0x8080fffffffe) 06:49:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 297.405934][ T7630] RSP: 002b:00007ff466e82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.414845][ T7630] RAX: ffffffffffffffda RBX: 00007ff466e82c90 RCX: 00000000004582b9 [ 297.422799][ T7630] RDX: 0000000000000200 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 297.430749][ T7630] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 297.438700][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff466e836d4 [ 297.446649][ T7630] R13: 00000000004c41f6 R14: 00000000004d7a00 R15: 0000000000000003 06:49:13 executing program 0 (fault-call:3 fault-nth:3): clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) [ 297.689195][ T7891] FAULT_INJECTION: forcing a failure. [ 297.689195][ T7891] name failslab, interval 1, probability 0, space 0, times 0 06:49:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x73}, 0x1c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r3, r3) [ 297.718273][ T26] audit: type=1804 audit(1554360553.260:155): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/222/file0/file0" dev="sda1" ino=17375 res=1 06:49:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5f00, 0x8080fffffffe) 06:49:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 297.829380][ T7891] CPU: 0 PID: 7891 Comm: syz-executor.0 Not tainted 5.1.0-rc3+ #50 [ 297.837459][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.847516][ T7891] Call Trace: [ 297.850821][ T7891] dump_stack+0x172/0x1f0 [ 297.855169][ T7891] should_fail.cold+0xa/0x15 [ 297.859772][ T7891] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 297.865589][ T7891] ? ___might_sleep+0x163/0x280 [ 297.870453][ T7891] __should_failslab+0x121/0x190 [ 297.875396][ T7891] should_failslab+0x9/0x14 [ 297.879911][ T7891] kmem_cache_alloc+0x2b2/0x6f0 [ 297.884783][ T7891] ? rcu_read_lock_sched_held+0x110/0x130 [ 297.890515][ T7891] ? kmem_cache_alloc+0x32e/0x6f0 [ 297.895603][ T7891] security_file_alloc+0x39/0x170 [ 297.900620][ T7891] __alloc_file+0xac/0x300 [ 297.905023][ T7891] alloc_empty_file+0x72/0x170 [ 297.909775][ T7891] path_openat+0xef/0x46e0 [ 297.914198][ T7891] ? save_stack+0x45/0xd0 [ 297.918518][ T7891] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 297.924303][ T7891] ? kasan_slab_alloc+0xf/0x20 [ 297.929134][ T7891] ? kmem_cache_alloc+0x11a/0x6f0 [ 297.934136][ T7891] ? getname_flags+0xd6/0x5b0 [ 297.938791][ T7891] ? getname+0x1a/0x20 [ 297.942840][ T7891] ? do_sys_open+0x2c9/0x5d0 [ 297.947410][ T7891] ? __x64_sys_openat+0x9d/0x100 [ 297.952335][ T7891] ? do_syscall_64+0x103/0x610 [ 297.957081][ T7891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.963142][ T7891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.969368][ T7891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.975599][ T7891] ? __lock_acquire+0x548/0x3fb0 [ 297.980516][ T7891] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 297.985876][ T7891] do_filp_open+0x1a1/0x280 [ 297.990359][ T7891] ? __alloc_fd+0x430/0x530 [ 297.994851][ T7891] ? may_open_dev+0x100/0x100 [ 297.999512][ T7891] ? lock_downgrade+0x880/0x880 [ 298.004345][ T7891] ? kasan_check_read+0x11/0x20 [ 298.009177][ T7891] ? do_raw_spin_unlock+0x57/0x270 [ 298.014282][ T7891] do_sys_open+0x3fe/0x5d0 [ 298.018682][ T7891] ? filp_open+0x80/0x80 [ 298.022905][ T7891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 298.028343][ T7891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 298.034085][ T7891] ? do_syscall_64+0x26/0x610 [ 298.038753][ T7891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.044802][ T7891] ? do_syscall_64+0x26/0x610 [ 298.049461][ T7891] __x64_sys_openat+0x9d/0x100 [ 298.054231][ T7891] do_syscall_64+0x103/0x610 [ 298.058801][ T7891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.064671][ T7891] RIP: 0033:0x4582b9 [ 298.068550][ T7891] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.089609][ T7891] RSP: 002b:00007ff466e82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.098274][ T7891] RAX: ffffffffffffffda RBX: 00007ff466e82c90 RCX: 00000000004582b9 [ 298.106226][ T7891] RDX: 0000000000000200 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 298.114180][ T7891] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 298.122130][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff466e836d4 06:49:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 298.130190][ T7891] R13: 00000000004c41f6 R14: 00000000004d7a00 R15: 0000000000000003 06:49:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r1, r0) 06:49:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:13 executing program 0 (fault-call:3 fault-nth:4): clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 298.355108][ T26] audit: type=1804 audit(1554360553.890:156): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/223/file0/file0" dev="sda1" ino=17299 res=1 06:49:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6001, 0x8080fffffffe) 06:49:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x2) 06:49:14 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 298.663183][ T26] audit: type=1804 audit(1554360554.200:157): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/224/file0/file0" dev="sda1" ino=17376 res=1 06:49:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6200, 0x8080fffffffe) 06:49:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\brist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:14 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x202, 0x0) 06:49:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200), 0x1000) dup2(r0, r1) [ 298.958646][ T26] audit: type=1804 audit(1554360554.500:158): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/225/file0/file0" dev="loop1" ino=52 res=1 06:49:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6500, 0x8080fffffffe) 06:49:14 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 299.060092][ T26] audit: type=1804 audit(1554360554.530:159): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/225/file0/file0" dev="loop1" ino=52 res=1 06:49:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\x0frist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:14 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:14 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x203, 0x0) 06:49:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') epoll_create(0x9) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x321, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xfffffffffffffff9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) [ 299.237712][ T26] audit: type=1804 audit(1554360554.760:160): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/226/file0" dev="sda1" ino=17340 res=1 06:49:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6800, 0x8080fffffffe) 06:49:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 299.400739][ T26] audit: type=1804 audit(1554360554.760:161): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/226/file0" dev="sda1" ino=17340 res=1 06:49:15 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:15 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204, 0x0) 06:49:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:49:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 299.545629][ C1] net_ratelimit: 18 callbacks suppressed [ 299.545636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 299.557532][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6802, 0x8080fffffffe) 06:49:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='Rcrist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:15 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) [ 299.705595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 299.711623][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:15 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x300, 0x0) 06:49:15 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) 06:49:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000200)={0x9c, 0x7ff, 0x9, 0x3, 0x8001, 0x60}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x1f) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xffffffffffffff08, 0x100) finit_module(r0, &(0x7f0000000000)='/dev/ion\x00', 0x3) 06:49:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 299.896368][ T26] audit: type=1804 audit(1554360555.440:162): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/228/file0/file0" dev="sda1" ino=17381 res=1 06:49:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6b00, 0x8080fffffffe) 06:49:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\t%ist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:15 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) 06:49:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:15 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x600, 0x0) 06:49:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80000000, 0x50b200) fcntl$setown(r1, 0x8, r2) dup2(r0, r1) [ 300.185526][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 300.191511][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 300.265530][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 300.271645][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c#sgrVid:De', 0x0) setfsgid(0x0) 06:49:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6e00, 0x8080fffffffe) 06:49:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 300.404433][ T9698] cgroup: fork rejected by pids controller in /syz0 06:49:16 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x2) 06:49:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121280, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xf4, 0x2000) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000100)=0xe, 0x80800) fsetxattr$security_evm(r1, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000200)=@v1={0x2, "5dcb9fe481a2cf08b878"}, 0xb, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r2, r2) 06:49:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7003, 0x8080fffffffe) 06:49:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 300.585564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 300.591471][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:16 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x3) 06:49:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c%sgrVid:De', 0x0) setfsgid(0x0) 06:49:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="941a98d8dd00094e49920cb4938cd6e5e036a509e95d71c7c2a2715fbaf5038d99aacbdc1334bfe5be3ec068491a0028f8e3202d83ef693edec4e35607b39bcea3ab53d4065305d16e"]) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00000001c0)) r2 = dup2(r0, r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x5) 06:49:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7100, 0x8080fffffffe) 06:49:16 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x4) 06:49:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c*sgrVid:De', 0x0) setfsgid(0x0) 06:49:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x600000, 0x0) sendto$ax25(r1, &(0x7f0000000100)="192faf42476c7de237df0f9cfbe7397f52662e5d50fdc32093b68194f1c1abc2056cdc400e90fd1ec51c9b226de7e719e522e6dcb2dd0b8720889f4e21b4ae36583786715a4e4349900af6ef61546e1d46308f1c15a9fd0f9e2bc1c5b9b683e28314f151bdb71d9cf7", 0x69, 0x48010, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7400, 0x8080fffffffe) 06:49:16 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x300) 06:49:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c+sgrVid:De', 0x0) setfsgid(0x0) 06:49:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x100) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c-sgrVid:De', 0x0) setfsgid(0x0) 06:49:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7700, 0x8080fffffffe) 06:49:17 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x2000) 06:49:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000200)) dup2(r0, r1) 06:49:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:17 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x1000000) 06:49:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c.sgrVid:De', 0x0) setfsgid(0x0) [ 301.888562][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 301.888576][ T26] audit: type=1804 audit(1554360557.430:170): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/234/file0/file0" dev="sda1" ino=17329 res=1 06:49:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7804, 0x8080fffffffe) 06:49:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x400040) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:17 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x2000000) 06:49:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c0sgrVid:De', 0x0) setfsgid(0x0) [ 302.281884][ T26] audit: type=1804 audit(1554360557.820:171): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/235/file0/file0" dev="sda1" ino=17402 res=1 06:49:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7a00, 0x8080fffffffe) 06:49:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:18 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x3000000) 06:49:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 302.677892][ T26] audit: type=1804 audit(1554360558.220:172): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/236/file0/file0" dev="sda1" ino=17415 res=1 06:49:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x8005, 0x8080fffffffe) 06:49:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cXsgrVid:De', 0x0) setfsgid(0x0) 06:49:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000002c0)={0x3, 0x1, [0x3, 0x101, 0x5, 0x7, 0x7, 0x4, 0x8, 0xffffffffffff0000]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000240)) r3 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4, 0x7ff}, &(0x7f0000000140)=0x8) 06:49:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:18 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x4000000) [ 302.798571][ T26] audit: type=1804 audit(1554360558.220:173): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/236/file0/file0" dev="sda1" ino=17415 res=1 06:49:18 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 303.012542][ T26] audit: type=1804 audit(1554360558.550:174): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/237/file0/file0" dev="loop1" ino=54 res=1 06:49:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3ccsgrVid:De', 0x0) setfsgid(0x0) 06:49:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x90800) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000200)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000340)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x6, 0x505, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) bind$isdn(r3, &(0x7f0000000140)={0x22, 0x0, 0xcd2, 0x5e, 0x131}, 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 06:49:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xb000, 0x8080fffffffe) 06:49:18 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:18 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x20000000) 06:49:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:18 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cdsgrVid:De', 0x0) setfsgid(0x0) [ 303.438896][ T26] audit: type=1804 audit(1554360558.980:175): pid=12244 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/238/file0/file0" dev="sda1" ino=17331 res=1 06:49:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) dup2(0xffffffffffffffff, r0) 06:49:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:19 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x1000000000000) 06:49:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xb801, 0x8080fffffffe) 06:49:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 303.575878][ T26] audit: type=1804 audit(1554360559.010:176): pid=12244 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/238/file0/file0" dev="sda1" ino=17331 res=1 06:49:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) dup2(r0, 0xffffffffffffffff) 06:49:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cisgrVid:De', 0x0) setfsgid(0x0) 06:49:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$rfkill(r1, &(0x7f0000000240)={0x3, 0x9, 0x0, 0x0, 0x1}, 0x8) socketpair(0xb, 0x7, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x10000000001, 0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x3d) dup2(r0, r3) 06:49:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:49:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) dup2(r0, 0xffffffffffffffff) 06:49:19 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x100000000000000) 06:49:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:49:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) dup2(r0, 0xffffffffffffffff) 06:49:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x1, 0x2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x7, 0x3f, 0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) 06:49:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x40020000000209}) [ 304.193961][ T26] audit: type=1804 audit(1554360559.730:177): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/239/file0/file0" dev="sda1" ino=17412 res=1 06:49:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xc002, 0x8080fffffffe) 06:49:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3clsgrVid:De', 0x0) setfsgid(0x0) 06:49:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 304.257373][ T26] audit: type=1804 audit(1554360559.730:178): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/239/file0/file0" dev="sda1" ino=17412 res=1 06:49:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x40020000000209}) 06:49:19 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x200000000000000) 06:49:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cosgrVid:De', 0x0) setfsgid(0x0) 06:49:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 06:49:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x40020000000209}) [ 304.473613][ T26] audit: type=1804 audit(1554360560.010:179): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/240/file0/file0" dev="sda1" ino=16657 res=1 06:49:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xc803, 0x8080fffffffe) 06:49:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d}) 06:49:20 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x300000000000000) 06:49:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x0, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x800000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 304.745585][ C0] net_ratelimit: 22 callbacks suppressed [ 304.745593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 304.757115][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cpsgrVid:De', 0x0) setfsgid(0x0) 06:49:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d}) 06:49:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xd004, 0x8080fffffffe) [ 304.906024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 304.912439][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x0, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:20 executing program 2: r0 = msgget$private(0x0, 0x200000080) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/51) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000100)={0x6, 0x7, 0xfffffffffffeffff, 0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r3) 06:49:20 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x400000000000000) 06:49:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d}) 06:49:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x0, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf0ff, 0x8080fffffffe) 06:49:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cssgrVid:De', 0x0) setfsgid(0x0) 06:49:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c.sgrVid:De', 0x0) setfsgid(0x0) 06:49:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r2) 06:49:20 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x2000000000000000) 06:49:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cxsgrVid:De', 0x0) setfsgid(0x0) 06:49:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3c.sgrVid:De', 0x0) setfsgid(0x0) 06:49:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r2) 06:49:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105512, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x400000}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0xf, 0x9, {0x55, 0x0, 0x8, {0x1000, 0x3ff}, {0x8, 0x9}, @rumble={0x9, 0x7f}}, {0x51, 0x9, 0x23c7470, {0xffffffffffffff01, 0xfffffffffffffff7}, {0x4, 0x5}, @ramp={0x3ff, 0x3, {0x0, 0x7fff, 0x7ff, 0x1f}}}}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0xf82c}, @window={0x3, 0x7fff}], 0x2) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r5 = pkey_alloc(0x0, 0x3) mkdirat$cgroup(r3, &(0x7f0000000280)='syz0\x00', 0x1ff) pkey_free(r5) r6 = dup2(r2, r4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000380)={0x0, @aes256, 0x3, "70c7bc08adf02873"}) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000100)=0x3, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) accept$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@netrom, @remote, @remote, @rose, @netrom, @rose, @rose, @null]}, &(0x7f0000000340)=0x48) 06:49:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='Rcrist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:21 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0xffffffff00000000) 06:49:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xff0f, 0x8080fffffffe) [ 305.785523][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 305.791355][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r2) 06:49:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusg%Vid:De', 0x0) setfsgid(0x0) [ 305.945527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 305.951428][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, 0xffffffffffffffff) 06:49:21 executing program 0: socket(0x9, 0x6, 0x3) clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x8) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000140)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) 06:49:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a708ccc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x8000) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r1, r1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 06:49:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfff0, 0x8080fffffffe) 06:49:21 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, 0xffffffffffffffff) 06:49:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVi#:De', 0x0) setfsgid(0x0) 06:49:21 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 306.318187][T14379] FAULT_INJECTION: forcing a failure. [ 306.318187][T14379] name failslab, interval 1, probability 0, space 0, times 0 06:49:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, 0xffffffffffffffff) 06:49:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 306.425526][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 306.431474][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 306.434411][T14379] CPU: 1 PID: 14379 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #50 [ 306.445180][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.455248][T14379] Call Trace: [ 306.458640][T14379] dump_stack+0x172/0x1f0 [ 306.462993][T14379] should_fail.cold+0xa/0x15 [ 306.467605][T14379] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.473437][T14379] ? ___might_sleep+0x163/0x280 [ 306.478312][T14379] __should_failslab+0x121/0x190 [ 306.483344][T14379] should_failslab+0x9/0x14 [ 306.483362][T14379] kmem_cache_alloc_trace+0x2d1/0x760 [ 306.483469][T14379] ion_ioctl+0x2f6/0xf70 [ 306.497476][T14379] ? lock_downgrade+0x880/0x880 [ 306.497505][T14379] ? _ion_buffer_destroy+0x110/0x110 [ 306.497578][T14379] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 306.497607][T14379] ? _ion_buffer_destroy+0x110/0x110 [ 306.520132][T14379] do_vfs_ioctl+0xd6e/0x1390 [ 306.524961][T14379] ? ioctl_preallocate+0x210/0x210 [ 306.530148][T14379] ? smack_file_ioctl+0x196/0x310 [ 306.535189][T14379] ? smack_inode_rename+0x2d0/0x2d0 [ 306.540545][T14379] ? fput_many+0x12c/0x1a0 [ 306.544976][T14379] ? tomoyo_file_ioctl+0x23/0x30 [ 306.550363][T14379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.557415][T14379] ? security_file_ioctl+0x93/0xc0 [ 306.562545][T14379] ksys_ioctl+0xab/0xd0 [ 306.566717][T14379] __x64_sys_ioctl+0x73/0xb0 [ 306.571325][T14379] do_syscall_64+0x103/0x610 06:49:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x80000, 0x8080fffffffe) [ 306.575938][T14379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.581831][T14379] RIP: 0033:0x4582b9 [ 306.585731][T14379] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.605596][T14379] RSP: 002b:00007f89be28cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.614288][T14379] RAX: ffffffffffffffda RBX: 00007f89be28cc90 RCX: 00000000004582b9 06:49:22 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 306.622276][T14379] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 306.630351][T14379] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 306.638605][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89be28d6d4 [ 306.646769][T14379] R13: 00000000004c0aa9 R14: 00000000004d2be8 R15: 0000000000000006 06:49:22 executing program 3 (fault-call:3 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) prctl$PR_SET_UNALIGN(0x6, 0x1) 06:49:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVi%:De', 0x0) setfsgid(0x0) [ 306.822161][T14701] FAULT_INJECTION: forcing a failure. [ 306.822161][T14701] name failslab, interval 1, probability 0, space 0, times 0 06:49:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 306.922765][T14701] CPU: 0 PID: 14701 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #50 [ 306.930800][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.940870][T14701] Call Trace: [ 306.944200][T14701] dump_stack+0x172/0x1f0 [ 306.948556][T14701] should_fail.cold+0xa/0x15 [ 306.953179][T14701] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.959101][T14701] ? ___might_sleep+0x163/0x280 [ 306.963969][T14701] __should_failslab+0x121/0x190 [ 306.968931][T14701] should_failslab+0x9/0x14 [ 306.973528][T14701] kmem_cache_alloc_trace+0x2d1/0x760 [ 306.978903][T14701] ion_system_heap_allocate+0x40d/0xaa0 [ 306.985393][T14701] ? ion_system_heap_free+0x250/0x250 [ 306.990752][T14701] ion_ioctl+0x3d8/0xf70 [ 306.994975][T14701] ? lock_downgrade+0x880/0x880 [ 306.999816][T14701] ? _ion_buffer_destroy+0x110/0x110 [ 307.005082][T14701] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 307.010881][T14701] ? _ion_buffer_destroy+0x110/0x110 [ 307.016236][T14701] do_vfs_ioctl+0xd6e/0x1390 [ 307.021168][T14701] ? ioctl_preallocate+0x210/0x210 [ 307.026264][T14701] ? smack_file_ioctl+0x196/0x310 [ 307.031268][T14701] ? smack_inode_rename+0x2d0/0x2d0 [ 307.036451][T14701] ? fput_many+0x12c/0x1a0 [ 307.040872][T14701] ? tomoyo_file_ioctl+0x23/0x30 [ 307.045793][T14701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.052014][T14701] ? security_file_ioctl+0x93/0xc0 [ 307.057111][T14701] ksys_ioctl+0xab/0xd0 [ 307.061257][T14701] __x64_sys_ioctl+0x73/0xb0 [ 307.065918][T14701] do_syscall_64+0x103/0x610 [ 307.070502][T14701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.076896][T14701] RIP: 0033:0x4582b9 [ 307.080776][T14701] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.104149][T14701] RSP: 002b:00007f89be28cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:49:22 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 06:49:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x100000, 0x8080fffffffe) [ 307.119149][T14701] RAX: ffffffffffffffda RBX: 00007f89be28cc90 RCX: 00000000004582b9 [ 307.127110][T14701] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 307.135062][T14701] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 307.143098][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89be28d6d4 [ 307.151051][T14701] R13: 00000000004c0aa9 R14: 00000000004d2be8 R15: 0000000000000006 06:49:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1e, &(0x7f0000000180)=""/65, &(0x7f0000000040)=0x41) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@dev, 0x0}, &(0x7f0000000100)=0x14) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x6) 06:49:22 executing program 0: clone(0x8fffffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40200, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite6\x00') write$9p(r0, &(0x7f0000000040)="60218bd0a7184c589b33bc444f86ed6a4385d007dd485027d43e5a0ebce33d5af576751bce01927e439f7029", 0x2c) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x10000, 0x84) 06:49:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 06:49:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVi*:De', 0x0) setfsgid(0x0) [ 307.421884][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 307.421897][ T26] audit: type=1804 audit(1554360562.960:192): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/247/file0/file0" dev="loop1" ino=59 res=1 06:49:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x200000, 0x8080fffffffe) [ 307.520469][ T26] audit: type=1804 audit(1554360563.000:193): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/247/file0/file0" dev="loop1" ino=59 res=1 06:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget(0x0, 0x4, 0x8) r3 = geteuid() r4 = getgid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000300)={{0x93, r3, r4, r5, r6, 0x46, 0x1ff}, 0x24a6, 0x300000000, 0xfffffffffffffffc}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) geteuid() ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000100)={0xa00000, 0xd1, 0x4, [], &(0x7f0000000040)={0xbf09eb, 0x100, [], @string=&(0x7f0000000000)=0x1000}}) 06:49:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVi+:De', 0x0) setfsgid(0x0) 06:49:23 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/4) 06:49:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1000000, 0x8080fffffffe) [ 307.683285][ T26] audit: type=1804 audit(1554360563.190:194): pid=15196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/248/file0/file0" dev="loop1" ino=60 res=1 06:49:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000100)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) dup2(r0, r2) 06:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x2, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20000, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4084) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 307.906333][ T26] audit: type=1804 audit(1554360563.450:195): pid=15341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/249/file0/file0" dev="loop1" ino=61 res=1 06:49:23 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x2000000, 0x8080fffffffe) 06:49:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVi-:De', 0x0) setfsgid(0x0) 06:49:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x101, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x280840, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400480, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') dup2(r0, r2) [ 308.079446][ T26] audit: type=1804 audit(1554360563.450:196): pid=15341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/249/file0/file0" dev="loop1" ino=61 res=1 06:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x5421, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) prctl$PR_CAPBSET_DROP(0x18, 0x16) 06:49:23 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = getpgrp(0x0) ptrace$peekuser(0x3, r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 308.218562][ T26] audit: type=1804 audit(1554360563.740:197): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/250/file0/file0" dev="loop1" ino=62 res=1 06:49:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x3000000, 0x8080fffffffe) 06:49:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVi.:De', 0x0) setfsgid(0x0) [ 308.381564][ T26] audit: type=1804 audit(1554360563.740:198): pid=15808 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/250/file0/file0" dev="loop1" ino=62 res=1 06:49:24 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x400, 0x2000000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @dev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x3, @ipv4={[], [], @remote}, 0x80000001}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)}, {&(0x7f0000000200)="3115bd8bee4aa4c11eab829a50d6a202290c1fe158171524f32a234170d7a7b699711361aa01866ec885d732edd492ba2e6224b96e5a023cdb1ca332aa367b50c99bc0b05fd212d0cded207ebaf324147484650cf3949c07f7f6641752655aa6636906469a62bd3cbf3ae9225a0428089c98a856033dc2b1fb3ab0e92b05d251e68f096024d837245e100c0e9865ecee55440eebae86c787a54776b86217b6cfce0bc34c362ee2fd9c69672cbf6156560aab12ed0182fffc9747e1662857102e204560e6965bebd6a6", 0xc9}, {&(0x7f0000000300)="7a70207717b63aee97ffd1df802cf35b6c3868dc0539760320dd268f55bc7307ddd854ae5924fbb48ed3b59203da6c30a4406f35186570e96411ed14148b5e2a0dc7737e87ad06cdf9eaf2524cba29037d2864fef412409d562855f40e4d8af300720064b497426f8cd0b047263f313ca4351671faf5c0d214d8d3874958970a3da03ec6e76236ebd03f07890a85b66864", 0x91}, {&(0x7f00000003c0)="061280c999343dd60140e731b1ca8152f711556aa46644c1ff5e4f52f8fcae5241d77ad60d78d8bc1fd90d6c280123dab69943aa8e3bd26b44756eb41ca72320944e6d62d4179cf633b9c05239f8fce67353c94cf6e3cab1576ffd573cf2d264eb6587327baa74e9d1fcbd365ae964975acbc37ff1efc578b9c01b359f7bfc7191e16a4582dc2dd33a5f945667dd821517c272beecc496e2e233be7fd55c1245", 0xa0}, {&(0x7f0000000480)="272e17b605a7d56d1b7d116568148966ce135ad66b7be336811f6d457ed99b675227f3199a0d6f5b9355e11b94d698760ef3cf938178e542c4915cc929d9846824e48eb3ecc1219baa5100327ac7cefac19ee87892febc9e8bac966970dca4ed2535750025348c20063f070b4bac25f4d9e1ae5830012481570858811bc40b72ff6b2bd50c47d6913c278ab7ddb56590e93010b5b4d8c20bb7a3a351ec767749a37ca10b9f5965f428a740bb98a5fa5b61f7701e94ec98d013b7949e60507a9a64ae", 0xc2}], 0x5}, 0x804) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x5450, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9, 0x40020000000209, 0x0, r0}) dup2(r0, r1) [ 308.604880][ T26] audit: type=1804 audit(1554360564.140:199): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/251/file0/file0" dev="loop1" ino=63 res=1 06:49:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVi0:De', 0x0) setfsgid(0x0) 06:49:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x4000000, 0x8080fffffffe) [ 308.776097][ T26] audit: type=1804 audit(1554360564.190:200): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/251/file0/file0" dev="loop1" ino=63 res=1 06:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x5451, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:24 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x200, 0x101080) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000440)={@bcast, @bcast}) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x26c000, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000340), 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) write$P9_RRENAME(r3, &(0x7f0000000380)={0x7, 0x15, 0x2}, 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r2, 0x0, 0x5, &(0x7f0000000280)='&[(@\x00', 0xffffffffffffffff}, 0xfffffeec) syz_open_dev$video4linux(&(0x7f0000000480)='/dev/v4l-subdev#\x00', 0xffffffff00000001, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) setpriority(0x2, r5, 0x200000) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000300)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r4}) 06:49:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1a1201, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0xffff, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @empty}, {0x306, @link_local}, 0x2, {0x2, 0x4e22, @remote}, 'team_slave_0\x00'}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe5, 0x0) r4 = dup2(r0, r2) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000200)={{0x2, 0x4e20, @multicast1}, {0x6, @dev={[], 0xc}}, 0x4, {0x2, 0x4e20, @rand_addr=0xffff}, 'ipddp0\x00'}) 06:49:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrViX:De', 0x0) setfsgid(0x0) 06:49:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x1, r2}) dup2(r0, r3) [ 309.004813][ T26] audit: type=1804 audit(1554360564.540:201): pid=16662 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/252/file0/file0" dev="sda1" ino=16961 res=1 06:49:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x1, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6000000, 0x8080fffffffe) 06:49:24 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='squashfs\x00', 0x4080, &(0x7f0000000180)='\x81M\x00') execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) 06:49:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVic:De', 0x0) setfsgid(0x0) 06:49:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20302, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) dup2(r0, r1) 06:49:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ptrace$poke(0x4, r3, &(0x7f0000000300), 0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7b7c}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000240)={r5, 0x3ff}, 0x8) getsockname$ax25(r4, &(0x7f0000000180)={{0x3, @null}, [@bcast, @netrom, @remote, @netrom, @default, @null, @rose]}, &(0x7f0000000040)=0x48) dup2(r0, r2) 06:49:25 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/30, 0x1e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0x278) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file1\x00', 0x4, 0x2, &(0x7f0000000340)=[{&(0x7f00000001c0)="5bf6c8b7d0d56639637fd50f77d487dac7eacf6af07d109cc6b9934fa58882dc749353fd388820632f23f24294f0ed229e79c0bb615f9f464dbf8fc98220cd0f2d9f679dbfbcbe47a6a5b8cb1d63", 0x4e, 0x6}, {&(0x7f0000000240)="6e66fab86b7dee48f8f0b3bd90c2125443bd25ae6590dd20e307df572678df6144942caa9fbdb89dd4df7413393bcb733d738e20fa1f462a593d3bd9e8471585c20020b1de3a80304cc628f7149e6ea7a6b8df03047bb35e0a89773afa3c2aabac96b8b027e4aef9486efd32ba1c677d77e7cfcf82322e3c56ca9e7ef6398e3bd32293e06a434d1f96b59abc1a9e491e6ce1060b871ac8991107167497173952bcd931ff474198a64b3d4ad59d2fc4e1ad66fe1813b740c8ff74e86e5d613274ced3f7649b9fe05da536d19584", 0xcd, 0x8}], 0x0, &(0x7f00000004c0)={[{@autodefrag='autodefrag'}, {@barrier='barrier'}, {@fragment_data='fragment=data'}], [{@context={'context', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user', 0x3d, '\xf0'}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\\!!$user'}}, {@obj_type={'obj_type', 0x3d, 'locgroupproc.,'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioprio_get$uid(0x3, r0) accept4$inet(r1, &(0x7f0000000580), &(0x7f00000005c0)=0x10, 0x800) 06:49:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x8000000, 0x8080fffffffe) 06:49:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x5460, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xfffffffffffffffc, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(r1, 0x9a5e, 0x2, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r1, r1) 06:49:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, r1) 06:49:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVii:De', 0x0) setfsgid(0x0) 06:49:25 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/mcfilter6\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1f, 0x80000000, 0xff, 0x68, 0x2, r0, 0x1ff, [], r1, r2, 0x8, 0x9a}, 0x3c) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="08000000e2ff3f00050001a64b3a66004600c900"], &(0x7f00000003c0)=0x1) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000140)="9a296c88dcd0622443926b04b54c89706eb175b0cdfa4dc6b3a2e29b069d94d5ad958b97861841d45a8e5a023b2ff3aa365212049e61f3abde1e7129bd125f9fad8272187db20a0e827a0eb15bfec888460b0f5b91c54565c74ce898464c", {0x0, 0x6, 0x36315f4e, 0x5, 0x8, 0x2, 0x7}}) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 06:49:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x40049409, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x8010000, 0x8080fffffffe) 06:49:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='coredump_filter\x00') r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r5 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x2, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x100000001) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r4, 0x420, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x13f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x29d}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) dup2(r0, r2) 06:49:25 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x103200, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20400, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, r0}) r2 = dup2(0xffffffffffffffff, r1) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7, 0x7f, 0x80000001, "02cc79dd678e3affb361cba1ce7d0a928fcb465d22617bc1d04b093b727d280f1ce1bbd04ef10aef231daf530c40a9e520b7f3539a7ca563a66a01e20c2538", 0xc}, 0x60) 06:49:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVil:De', 0x0) setfsgid(0x0) [ 309.955552][ C1] net_ratelimit: 18 callbacks suppressed [ 309.955561][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 309.967153][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:25 executing program 0: socket(0x1e, 0x4, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000700)='/dev/input/mice\x00', 0x0, 0x88082) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000800)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x401, 0x5, {"601114b7b22fcdc2973f7b1946550d92"}}, @in6={0xa, 0x0, 0xe11d, @dev={0xfe, 0x80, [], 0x19}, 0x110224a3}}}, 0x118) getpgid(0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x40000000044831, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0xfea9) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) clone(0x64000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x1) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7fffffff, 0x4, 0x0, 0x5, 0x3f}}, 0x8) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10003, 0x0) socketpair$unix(0x1, 0x4000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x183000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x2, 0x0, r1}) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x80) dup2(r0, r2) 06:49:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0x4020940d, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x9000000, 0x8080fffffffe) [ 310.105527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 310.111357][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80e30a) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVio:De', 0x0) setfsgid(0x0) 06:49:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 06:49:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) pread64(r2, &(0x7f0000000200)=""/4096, 0x1000, 0x0) r4 = fcntl$dupfd(r2, 0x406, r1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x20b, 0xa1, 0xffffffffffffff80, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = dup2(r3, r2) bind$inet6(r6, &(0x7f0000001200)={0xa, 0x4e23, 0x5, @loopback, 0x81}, 0x1c) 06:49:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVip:De', 0x0) setfsgid(0x0) 06:49:26 executing program 0: clone(0xa040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0xfffffffffffffffd) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x1c) 06:49:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) pipe2(&(0x7f0000000040), 0x84800) 06:49:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r1, r1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x600, 0x20, 0x0, 0x70bd28, 0x25dfdbfb, {0x6}, [@nested={0x190, 0x55, [@generic="b1b3639eb85abeeec26e6eaef73dcc51ece2e1a249ae920e3c7d7e9a2edc5f3bf15f8b02c5741f0a0ecd08c994e40f8056e997345082ee3875ce9b2c9ceb9358f698cd01301b0d8cc4aed0ddd0d804116330b8b18b4404454452a89ef55baaba96f2ce6f05f5acc440d7b1f848ed003cce00c1807b5371e39e0a486c475139bd70bd563a3787f8b0a0a7e9743a1d9dfaa6cf43d8e07d071bef260c9b885323599e3f3687a3c82e7be88e2bf6cf4ef58114e95f9795", @generic="557ca3b67b0b4dc7b1e1b11438c89df62b3f2c18ee73c6ea1c5848158bdb37fc5a6f61f8f96d05aff510bddc5f7446d81850baca53f46110b2342b443d36b04ac85b087b412d4ffcd9ed1315e8e4e7c1a47e9e6f088f55a2be51c73dbf2fe4e5ab81a931d06a4d89c72c", @typed={0x14, 0x5, @ipv6=@mcast2}, @typed={0xc, 0x7d, @u64}, @generic="fc308d32f797fb6deb6eb63b414879942a25930b57636ed0ad259f1c90f52dff3154c5e2af39f424096d1461250e79ede7669adeb4a2227c469e92e4f8ca0592c49363e33802a38ca18b9a"]}, @nested={0x130, 0x65, [@typed={0x7c, 0x3a, @binary="991f572ba1ab84b4b644c81afd1149564492a05d194f3c0910366c789304212f365841bac8b68a5a0edbbbb1599547c531a09f06e06fd7d1743706a36bbd3081c4963da9a24c38aa1d4caa014c84e9fe92fbb51fe2c9cf0a6fde7262dc90940577cd522e459b81e3393e3e922002855217bb8ea403fd"}, @generic="d2ab28ab91374f63fface4349df26bddf6fedcf5e5c22171c094b20028b7e69933a59a275c442049958bb1e397de75e2989e3251c4d461372d008a37ec2e263cc0a5aaa8aeb26be374e0d7476ff51cc98e9be70e8a3eec6acc8341a7c35183a3b617a991e0c03d554d2257fa69b667969b51ad60ecc15fe9a245e94d7a6d52267ad9006996fe46525469651a561c9d5ee71224667280ed4f9e31ba5b595c10f9bb890c6da6af3eb2ef4c3750e8be"]}, @typed={0x8, 0x5e, @u32=0x2}, @generic="be59bca2018e176b5d10c337aa0e596ce7a64b54316b9f6191e479e62518272468992859207251b654545e185173d39e5a5bf0078764546c4f6617a432178407a9930ec4b9005e65834086b5115e7c4bc8d767d7a926c22ae9c93d7cb27d4614f2594c56debb8e776f8ac3bd05175ae00cbdeae2279815aaa53ee60edc1bab92", @generic="5940168e872ad9774b01160b23824a28461ebafa39179f280eacb54bad744769b7bb0f56b8554b6d27b17e9e82a808786b386b470c12b2b36770f87db393482133590d5b1a3078e0e476da3e94311442b10f927178e775bc7dc5ec4b84872eb55ba0801fa3641369954e811967cfea327c1f9d2618892aebf20b3a889d4fdfa41a4b8f2eb09a7948bd2dc3a7391a", @generic="09c29f86eee72b307b8493b8248a4a68cbcb8af78d328ffd9bdc5cef3f66ab71af6504f2146ea39a2261a93f16ee5f1237bdbc9627171ca2ff41f23fb80228568aeaa1fd6b63b05d86869683ef339498596ebc00d48c167526cfcaf1153fde355570b6449652", @nested={0x1b0, 0x61, [@typed={0x8, 0x81, @uid=r3}, @typed={0x8, 0x5, @fd=r2}, @generic="1e4c3c1b798aab4a8a692d2bd82dd0eb6b5573240d4ab2431dcf64bc8c8101d3bdf64a91dc52901ce6e40cf694913a5ba467640f0ab29be33ed9c3f41df20751502ee4b2998e7be76b95b8f3480b4ca3e50cd6bb19f137311161cbf2ba75eb48708394a25aa2d6d94ab0cc65793431749ae7f4b510533e813a844f2aac5c1708eb083d47cdda6ca5dc8afcca561b6abcb2e88cec0e9497e6fbad0c5bb062545129645662dc21", @generic="66335c7c54f452a5e2a053a9acc1b19875a52ae4a155fe0e2e9b5b6cdff37d2a3a88c503f8d04ee54d723b8e4ef4328b3d98fea8a6270b98f46ba5069b13502833f0d5e33c0bb5cef18f0c7f761d037d34c6221409bc555db3e2e9fc7bfbb18eb304858658aca3705cc8ee99c09e9ea4d6c00be767a43f752e13793c682bbe0007b18b54a12ca712a40526ac88e57283743d4c0c221864341cb2662516d51d2e6720e2af182c1ff0793d9067e53cef2ed54c74039fc3a1ee52338739b774e03989cc035e0181fefa24eb049ad85569216ce32572d54f62ec7bcb6a904ee770967c365fbd1ed5fe7da88603", @typed={0x8, 0x83, @u32=0x2}]}]}, 0x600}}, 0x800) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1ff) 06:49:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xc000000, 0x8080fffffffe) [ 310.585533][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 310.591366][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x1, 0xffffffffffffffff}) dup2(r0, r2) [ 310.665550][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 310.671661][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVis:De', 0x0) setfsgid(0x0) 06:49:26 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0xffb, 0x8) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xbf22, 0x40000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xe12, 0x40020000000209, 0x0, r2}) timerfd_create(0x8, 0x80800) dup2(r0, r3) ioctl$TCSBRK(r0, 0x5409, 0x2) fremovexattr(r2, &(0x7f00000000c0)=@random={'system.', '/dev/admmidi#\x00'}) 06:49:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184904, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:26 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrViu:De', 0x0) setfsgid(0x0) 06:49:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184906, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 310.985548][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 310.991417][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="e3a1e31fec6010b7b203733e091e4ff6000000009e76bfa3b02155d22061baef870c0426b4464e40790789a28a6f2e8c134c23812df04ca575a2043ff96ffb4aa2460d6159a2afe17b179ec8c27add4721d139e1a59160aab7fea9fdaafa99612a9bfab007e7c3a0d09f6cae2554c69072e4c37b87f278156d3f3c3b0f234e4babd16ef26391165754691349631029256ee84e57c4913ecea2c2603db2963df27581b4bba3a9442ffd6fc77701835da197236ad63570d7f621f88c6e58090f9bf261349ef875f6b62d12c05bd54f8f4d0e110c2fa7341b2e77d01165107bb7afecf248618e6a3c206c7ee4609f6bf2c206cd9e2e9fd60188cd6c3907f60e2f114e40859396949f7ee522e21a104b14528a58dd5f76027569d0037f0c19422934ff09c5689d971aada6e2e8ce819f16a2670bd18a3626957ad8f7313dd06d94d75612f0d06e7f15be66b53b568d22ec", @ANYRES16=r4, @ANYBLOB="000125bd7000fddbdf2501000000000000000141000000180017000000148000000069623a726f73653000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24040800) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000100)={'batadv0\x00', 0xfff}) 06:49:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0x5c, @remote, 0x4e23, 0x2, 'none\x00', 0x0, 0x9, 0x1e}, {@local, 0x4e24, 0x2000, 0xffffffffffffffff, 0x90000000, 0x7}}, 0x44) 06:49:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101400, 0x4) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) pipe(&(0x7f0000000100)) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x0, 0x8001, 0x3, 0x7, 0x11f, 0x1, 0x9b88, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x1, 0x1}, 0x8) 06:49:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xd000000, 0x8080fffffffe) 06:49:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVix:De', 0x0) setfsgid(0x0) 06:49:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x22100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r4, 0x1}}, 0x18) dup2(r0, r2) [ 311.257182][T19663] ion_ioctl: ioctl validate failed 06:49:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2000, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xe96}, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x2}) dup2(r0, r1) 06:49:26 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000000c0)) 06:49:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0189436, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:27 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x4000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000180)="e9c2a41ea6d304f12a4a41623ae4c0a926872e55e8ef19a54b1332c59894ab430d163a194e2241bca08ede0e11bc398ac6063cb07c4ad1fba70d832eb0b023ef458e8c36291c562409029098d3f21053e87075e90c2202b6cf2ba5a30130303442836fe20099c8015e88402d817da05c457ace38f209faad6ac441302917e21d1645186bc1ea8b6cd61e0b660ef045cc85c88fcd6a9d0a322573082234cdccda52531d0da3f16edc0ae6587ae77aabce0c0375c86fbaa0fbef680caf5b2e7d158b6cdd821393a1418d") ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000040)={0x50, &(0x7f0000000280)="7e47d076b326129624eafd170c8a1e73b8358ba1f8df232e0543a41819584babd06f14698c7940db5d7772100024a753c04f2be305143cc455141dcd53089de5c2ac0f24be84da5778b36894cd975b0b"}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r3) 06:49:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf000000, 0x8080fffffffe) 06:49:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:D%', 0x0) setfsgid(0x0) 06:49:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f0000001800)={&(0x7f0000000140)={0x2c, 0x3, r3, 0x16}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000680)="986da13dccd200a541b3a5f060ba453a459740d076d2de3a4d470166db586f242f1d17acbb667625cee7d629c0d1bee9fdf99886e624da7ea4ba1f24d52f38dabfa2f5a75dcdbbb7d282aaa022245d812786954d9111acf8bd208aefd6b8ffe954fb6141838b91ddd35da649d99b9bb25d54e06c67be79c53cb271cc7cde0ff333e0b7284b1a83f8b3bf96f594406ce9d7ed0f3e7f8a50028ffaf5ac13aa4d16b1e59e0db4fbb7c8f9f152ecdbfd6196bacc211e612bd1ac291933fbff6b18c005a585426a84387e7385eab3a8443b9778926e3363c0a21e5b8c49496ee57d86c4f3f3fa3b4ff2f0332d26c06e54ddc4e00806053ed4b956dd5a400082abc70a368b9d44d8fac2666b1b1b9416b207a9a85e42249d68732b81d58793023a822767d12a610e51bac5b7c04d9b44d44bd7e8bf55a190ccc6aff46a1f43b4df7b9d19955c082d3b52801f29dfe97c369f319049332b876beb905a89eaeb509813ba1b4874a422be43c9630abfad379da9e0e64a57c831d0e9643b1a2261a48604cf13a8f9512573605a6ce4b7536dac8447caf4fd30973e5c316c34e8018bc1181558f9d2e3914312354175dfcb88691e112b2729d2a49e83de3e7bcf553eb88e853a2f9acfde71edd9b7828f03c52eaab3d1b2e271d83af2cdbe6c8e0bf9d6a249ae22bc20cf4263b897c7f5f3b2c4ae18273cb10b7f53f6a6612e2d788c56c1ab219465cf82015f5a8040f4395ed2bb297fcb13527fadf7ca1ea965252de8786666f980492208f83bb6c0f82f311d69be3e64b02a702c08e53d6c5d323a4e285b959194adc4db2b51b4746743512260b917b9db5f772cf91e1d6aecb63c30a7379f318600fd87102c43ff7a4ba695d259525b18ea7600f9901165719a06a7c2d8fdfef7132ea8f6b84b1144e332637001c8ac2fdf7500f204158c098d82a58644e9c09c5bfe52f52fb417d50a26e8423f9ced4663f53e3bd056cb65b5848753730c8d68ad5e367b573ce5c4a9f1da6aebd91b9c028e58372a8b294e0ce1d422dd9388da2e8c5c32a58c5461224c66bf7937be603caa2044f2b28c74099e00db60fdc54a6507371bef98b41b0875eded7c7743b3c6fa54ad8973b33cf4a47693c0cf050d7dd7b82c6a50095c0e69697ff0f8d52de409c52754c800096715aea42db1315eeb79631d3c13642ccb87181309649c97d2817e3208acf475eaef182c9644b5fdb45a3993643a39ff036843da4f95e155246870b39102cb937d8528bd392a7cbc273b31c6b0505e00b56f517eaa97539f87dff457ea236b55f9c2ae00899725b45d1bc880112ef47586c421d7178d1deb24c6eae24fb89f0325a339a35e871091692238079eda15799d532d683abd64559a7d489ab7715f47682ff5a97e93d36cc176eeb3a40f437cbbb9661bedd291b9726de88e9fda7556ece4657c187309a2f27fbd5686689158fc73bd1107872798ee038b155a6a68095ac0037228ac12139138e82e650b03b601224f2a6472b177e6b7c985ebd7de1456e50bb22e12b5f5fd266c7dbe1bbdf4bb2bc3c7cb6a623dde3e700a7f6b40dcb92248c3349dc96b1ad4e1d8b249a02dd3bcaa41ac6157077d625103b10da05e2debe0a94049162a782c61ac6952fbfbc49aefe6fb9edaa72d544416041dae913b0498ad143b2b0164630a460b5f8baea71b2267184373852c8914e69e7c1babb2b76b597648141ee9acd617264f33eaa9bb7593f5baa0fa086a1bc818034bb07f4415066639b47884427301e6c9b6427acb9ff6712ac3b2e2c168f3c93118d1ff613faa05ad6fecb7c4621742b6b07f7cd527a51806ba6d9730ba8dac51cd46dc84c6301e94efd5f7257fe251402f11fa342bee4c434815a1ea7013b98e591098d6452cbdec4de00443ea6f1140390161bca585e9ed72f2a01e6a5f2f4a8fc792bc0724c590b4c844155a60a233864851a610c53b78508f666e826a4c658694d24a4f6b10b26fd4de358ebc53ba6aaec7966bd1a21676fa343d54b5746a5b6210723f1d982cfdc5209071812968497a185417a112b0d3fe82e29513f200d5759ebf48b9accd4127df651c7821d87c1f13f591bbee579e3887595f6719f2e2b070d278afbe7277c7363930cb1977040120d1c3bf9ebad83c57799a5e24511faf0429cc298e97df20ceaa427a21bda79e9520385638239993b3a1a7b2d0e1b9d622b679852c2898238fd0375968c2cb6a990aed01ed83ea8a523fc03654b0879840efddaa821fb0098b8f9d1422fd0a15c9fff232ff4fa5bf4decd18a4a869626e6c638bdf8f38f65715d74f1c7c1a28c3a50cd0eabed29a3cccf2ab5cb0b3de009541938714d8be2c84e9ce775501b87b72174b3dec22a568ca8ba799432cfc093d34999e3570b7420a0ba12d1325e178ed43a0a87fb69db04919af1ed6a44029d61174b3edb1bedd264bb475d922ea9314901f51b03d5be893068ce86c137a90af49fd10405821665e806c8ba15eda64b5fb8734e9819a41b7b5034e8c8084005b87ed8fbcabb3d9f62bfa6bdaf00c6cb2791e46c011c0baae291e1f73d695955017aaf9f4c42823f89b8ce0204cc639198496e40cd23a08dab99505cb3724aafaf11543aa1fb6eccc541a7000af20263e0e64fd545d293cbf48366453bce097609a9f7e06f3c5d84b0041440fa0612fb0d6b51c4b26027952ceb204394077f110180eca39bc220c84bb27cf5fa1c37143542667bb9622ccc38625675cf61b45efd4e329f2ba32e997717ccbacd34317d395832865649ac928bffea5d60f9f1d396f8ff9b3bc3aef15ef23d2573b395a9ad2652c38f6b825b54ce08ade32700f480b411a78bd8b4f318edbc89f070ff4076c641e77bffb754b99e7a321577fe198a7c51a04b5e39358dfd7a9c324221941c599088cec83e1f3575b2a693249e8613e13db2ad28fb71c75ab2b9735c7d4fe6bc69073d85c9dc9ef1d2c0e4b53c350a4807e0b7955adabd77b3c861b4921b736faf0e13de53e8672465f81fbaf72b300974e6b566a03e0d6ea524edd9642aaf60e21b7a03efff2b63d5f6fad029c87593987a5cd5f0f7cc8553e20effa189ff026d708d25145f8982062c7d925d27f1e0c5852bc3eebc694c845380e42ab350304e8145ebf01b6b01615250f31af7b6f6502616bbbb0a067cc7abffed3341a1a5a4ecc4df8f7d1c13bd486254bdeac3e598a04f7233d0f83c4358c96bdf22683492d4d2e1645cae9281ef59b104d2890fa999f3ef20580ecc6fac912d06d25395044d092762cbcf7feae4e135df82ac68986ca4bb9aa2db7cd245d53c56e78709fc41886bb22cda95e174f01d6772eeb8c06e8a54ebb2e367abe7ae8b009cee7e96a0f95cb1d62af2607bd1a1ba4b9a4b6a79ca507db5a70de115f9e5851fbc14767602c11082cfef65e28d462f65a55eff2e5dfd4278b7fa65d9c25e62c112e3d3669dfd639c911de2065558ae509b533d0f6cfcf2daa13082111f7ff63d0d40b50b58bf8fe33fd092bf228a5a335d4810bdbea26fa11f7f425c5962ef276307bb03863d50e8f527bf5bb37fff34c18e483faee5a7db2f9809b8649a69f22d296051037b3f6b324eb212b97dc9dc719bd4be77007bdc747a4c4e238a2e3d2abc9600e3a082ab58f929d0a682019ccb53314010b718c1bd0da45e9776df8ca9ff2c28d82617ef71e32ab56cd630d69c99b187193c5fca19961fd1e4ef5ddd3830a03b6d41a8a5505d9ac15faca58a19401ee2ff33913fd3a48f93bdf235d6a42bd439420970b22a5ab4753a986c9900f9c7239ffe32d7dd82a8d93f0a9516210e663db427dae16a8abb4a8eff946c0a1ac38afbf8d7201344e543bbe87422bf4a6150edbfe459fe0629a2cb17aa264782276a71f9fd9d51e4f4809986b50a943f638bc0ada19b04f5753c2c822b64bafb8117d877351d6e480ace5a5409fe372ffed565c345315e36c5864bc2c15bd2f2ae8c15f238a8b8b7a232f7e4311a0cbf1d19a9681be6ddd6cd9c423e82e4337be2acbc9faa89281fa429bdd9c4a2416f40f61fa03534d57b5606b25461a271419f7b9a0bf7102bb53cf3214cf8990b2e6d83697e990e5c9a867882e8c2e6ece2c9942b8d99b771bf0a2bee657ff9201d8d270a62ff61bebe8870c89d74e23f3c9879f5dcac4b2ffd9f89b19080f3a2fd3a508f512a0c6dbff699f6a67c84cee17cf0929fd9bd4915726ad58f9b82eaa0bbbde6acce011373bfb6e575330f6d2ac42ca06b758b67e01c22885036673bbdf82a2b817ccc8cb7c681c6c9eb5a68946ec1890325599669ce379b8f443e488e621f153b13c73b504f5f2709a5a451743e6ad2579de661e147e50642ffcf9c88fd074ba4d577794b77c5bd51188e621d7ddbbc19093b651f3326ff3265e5ecee7e69ea0d879fb0e87a57a8bd0e853189aeeedbc77c65cdde34bba01c478ecbd293a3f7d9772a5fddc8f671ea286a34dfece583e45a0e88a8e9a902b025eca382e2ad34ae39f1b09b8fb1aeef024a4c515d9ede2223bd6e631c20e7a8291ee16b6570a00dcc1d2f5ab30c5fe2671c8d5484548dee1b44a38c90da895383b4b46f1dea323a45291be3d6d1167a19b4c30983baf178eca2a6a2067da91b4cd73b42640635101da0e61b5556baf4ea366003e197285d59594f3490058c5cdf0c69cfd122e863e58fe451b35d372ffb4e580c195d18ec5c270b21940b479b2b65eeb3c42b2ab6b19ced8a8312fcb0684751c3f26e004842275b6dcb114b725caccdc6a83d885eb50e30da5c5fa92b9720e16d0657e01f2bf5e8bbb6d5acb1bb46b4305f14b220f8da9b92657f7d62771a807a5fa9952f8230e20110bfdaa205342952f8964d9fca38e556452be884955968862f9f4cde37611054c44d8b739243b98c477c3f1357f838c469cf74484a9b5f81e7007b971df8d26b4dd458587c724afbd7eed327fc78de290512c24b3a70967e034978cbf2b6e9260fc53796733ad250308d1cf0d9aa602f12cf1a1efd8c14d3bb59e3e25b4d9d85a507e73ae88d339b5370e9536ac71945ce87ac08e0aeeee6bf64c2c1212ea556bb89ecd2b2e6ef14c9000ae6ee6f9acbd87a817aab9990b3df64969f42197c09ac0b633217a4054aed1ef07c15cede22ef92da37cdc5403b883241aeb84b77ff12f7eeed69dfae438d1b92f4e76646381adddf52560cbaf39a316c500659bce2776bc27d3113a27e81aa4e6aa7fb7c59c7cd11f3316751a62db5b057db3058187d445d4d698148e6ef19acd37ee8498bac6c0a99f8c3cd687b2244bb7924d76c7f0aebbcd6166ef224dfd9f3c27cd69b62bfbf80c2b05137e05ad22d358521c8d307c3e738def3792b38f7b2bda25279d7beb43ae1c08b2fee0fb040ad470d7c4ff978443cdff87a435b66afff8ba7509205ea4f5775e1b8f0e15f05980d54a92057da30bd941e0bd1f19f07eb3c127c28d203068775ef73ceba78f6889412a1488195ce52e6dbf4b91575b43f2835d26067ff4e6978a8e6e2167c4ad665036f287beeba443694125e7096263e9c9d2b5c4927ea3cc2ebc7a0a508ef1bf287db4362780ab844c07f1fc5e71decf3e33ff5731c2bc483d695ed82f390910369476a12406d9ffe2efae4b61365650c0bb478266ff56e4bef4e3dd039d7c967a3ff61591ec6e0adf32d7d2d433c9614b73cecfd6d62d65790cd9bba0e5c23a47ee65a3d62c4b5ec034acd2efa9d661adc66f3bb8c5940a064231877172f14cef716c66231467d9b4cd3ac2d230839e50c774cc442c2e09b60df7abf", 0x1000}, {&(0x7f0000001680)="d2f7f525ea5d66c1a270b8a6c3085b7d763659bce3a215a15412225549bd91bed46322416069774059c52000ebab51a1e9c32571639f925a67b9964e9df7d002ddaedada47a2e8db9d14fc56cc6ae612efabd1f6d584ce68321c53772032b755e4f259b4481cd9d12cd6b5c8ab8cf65fb6be5f55c4dd24a448f89fe3b565293669fd904a58a634cfc9cec4b3defe095e702558d9454a0d32e03ab62c2565ccb1dd0b1dac6714d9d4", 0xa8}, {&(0x7f0000001740)="6ad0c4203d0f9fbedd40ab74d39aa08e5fe97e499652f72fa8ae7a9f7678d61278e925b5589ffd45b46b30932c079231007e85d5cebe3359ab5109f6da8987533cc44a96185d5aa383d1fc2a0a4b03c8f6f0e99c2d10528c82378018d84e8e85be54b2b6007e6d59b5e46b201713d9511379f13de19f3f0a6180cbdaf3", 0x7d}], 0x3, 0x0, 0x0, 0x8080}, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000001840)={0x2, 0xfffffffffffffffe}, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0xd0902) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {0xb0c, 0xffff, 0x100000000, 0x7}, 0x32, [0x3, 0x98cc, 0x6, 0x400, 0xffffffff, 0x8, 0x2a7, 0x3, 0x7, 0x7f, 0x100000001, 0x100, 0x0, 0x100000000, 0x8, 0x6, 0x100, 0x101, 0xae3, 0x101, 0xfffffffffffffe00, 0x0, 0x9, 0xfff, 0x100000000, 0x7, 0x9, 0x8000, 0x42, 0x2, 0x3, 0xffffffff, 0xfffffffffffffe01, 0xfffffffffffffffa, 0x7f, 0xef, 0x0, 0x3, 0x1000, 0x9, 0x4, 0xffffffffffffff80, 0x1000, 0x7, 0x7b9f, 0x8, 0x6, 0x10001, 0x83b9, 0x200, 0xfffffffffffffffb, 0x1, 0x0, 0x0, 0x7fff, 0x2, 0x80000000, 0x20, 0x3, 0x61, 0x800, 0x80, 0xbb9, 0x3], [0x3b10, 0x8, 0x9, 0x100000001, 0x2, 0x0, 0x7ff, 0x5, 0x5, 0x4, 0x4, 0x0, 0x3ff, 0x2, 0x10001, 0xffffffff, 0x8, 0x800, 0x2, 0x2, 0x7, 0x5, 0x400, 0x7, 0x0, 0x2, 0x2, 0x8, 0xfffffffffffffff8, 0x3, 0x0, 0xd649, 0xfffffffffffff626, 0x0, 0x2e9, 0xffff, 0x10000, 0xfffffffffffffffe, 0x9, 0x4, 0x5, 0x7fffffff, 0x361b, 0x6, 0x10000, 0x8, 0xffffffff, 0x9, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x9, 0x9, 0x454, 0x1, 0xffffffffe4b2e539, 0x8000, 0xea, 0xffffffff, 0x1, 0xeb08, 0x3, 0x9], [0x8001, 0x6201, 0x7, 0x7, 0x200, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x5, 0x13c02e43, 0x9, 0x80000001, 0x3, 0x2, 0xfffffffeffffffff, 0xffffffffffffffa6, 0xbc1, 0x6, 0x2, 0x6, 0x3, 0xffffffff00000000, 0x100000000, 0x4, 0x20eb, 0x4, 0xd5, 0x2, 0x2, 0x3ff, 0x0, 0x7, 0x6, 0x0, 0x6, 0x40, 0x4, 0x7, 0x0, 0x1f, 0x81, 0x2, 0x1000000000000, 0xb3, 0x10001, 0x10001, 0x8, 0x800, 0xd522, 0x8, 0x4, 0xc2, 0x7, 0x858, 0x0, 0x8, 0x5, 0xfffffffffffffff7, 0x0, 0x800, 0xf1c, 0x3, 0x1], [0x3, 0xf3, 0x80, 0x0, 0x1f, 0x5, 0x7, 0x6, 0x91, 0x6, 0x0, 0x1ff, 0x0, 0x2, 0x2, 0x0, 0x5, 0x400, 0x4312, 0x9, 0x2, 0x1399e355, 0x5, 0x876a, 0x351, 0xffffffffffffffff, 0x8, 0x3ff, 0xfffffffffffffff0, 0x7, 0x0, 0x1000, 0xfcc7, 0x6, 0x5, 0x9, 0x8, 0x7, 0x3f, 0x81, 0x200, 0x9, 0x8, 0x2, 0x3, 0x16df, 0x3, 0x5, 0x100, 0x2, 0x9, 0x4993, 0xdd09, 0x8, 0x1f, 0x1, 0x1, 0x0, 0x9, 0x231, 0x3, 0x8, 0x7, 0x1ff]}, 0x45c) dup2(r0, r4) 06:49:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:27 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000140)={0x8dc, 0x0, 0xfffffffffffffffe, 0x7, 0x7, 0x8}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000180)={0x40, 0x8, 0x7, 0x5, 0xd782}) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20200, 0x2) r2 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x100000001, 0x40000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x5, 0xaa}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={r3, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffffffffff81, @mcast1, 0xffffffff}, @in={0x2, 0x4e23, @empty}]}, &(0x7f00000003c0)=0x10) openat(r1, &(0x7f0000000040)='./file0\x00', 0x204, 0x4000000) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000400)={0xc8, "f5477b8d2531c0c83bac3e3c711513a16b8392834f991ea05163fed881c58dceae33b935ccd6d8e959dd39a4d2e8fe0eb91ddbd52256efd498cbcbea2c3ff10c3875af6a3f332e24031f36b2d16fab0a03f0992f8bd96876fa87908b6cb0a7f8512a1fe50d2627d9cac3295560d28854653fb93971843f49fc95f74bd1a5f9c97491ba9c69d5e4a897eaca89fd29439e04e5a6ee167cff68e8a3ba7d2dd0a5bdf83c26ce97839e993d09a7bc5747ff04abf59e1c8cd3e2f034dfc6bf53afc1fe683e374eef5fc392"}) 06:49:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x10000000, 0x8080fffffffe) 06:49:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc020660b, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x3) 06:49:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x8, &(0x7f0000000100)=0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:27 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x204240, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x0, 0x8001, 0x1, 0xfa41}) mknod(&(0x7f00000000c0)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x5) 06:49:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) dup2(r0, r2) 06:49:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x4}) 06:49:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x10020000, 0x8080fffffffe) 06:49:27 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82108000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 06:49:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000000)=0xe8) setfsuid(r3) signalfd4(r0, &(0x7f0000000040)={0x7fff}, 0x8, 0x800) 06:49:27 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x90000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="04000000000000000a004e2400001000fe880000000000000000000000000101050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e2400000001fe80000000000000000000000000001205000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100008000fe8000000000000000000000000000aa07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000090000000000000000000000000000000100fcffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200007fff00000000000000000000ffff0000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000003fe8000000000000000000000000000280700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000352bd5c8e01060eb68a61a4c9c216ee0147541508a6001d5691d3c66fe38c8da6091af6330d5b35d82f6cbd7a7b890bd593e5cea0144c6b2be0a201f33220349d06ddb7f60296de05aaaafa3df0b3bc1ed4bd071cbbd5c9f1b54fc884f2188ecc1f7b1a95099dd7e79b6b77c4b1d037a75784fe9cac736a501e09a4fade6715d4e046195ba2585be8865e51018b4f061ff1229de838a5122ae48adaf0764476a51acc3fb7b4c1d"], 0x310) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r2, r0) 06:49:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x6}) 06:49:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x12000000, 0x8080fffffffe) 06:49:27 executing program 0: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x3, 0x3ff, 0x616, 0xffffdffffffffffe, 0x5}, 0xfffffffffffffd22) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x8) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x800000000, 0x400000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000140)="76b82cb19c13ef626f8bb49768a0ad8366d9b3ee39392728c74058863d88fa2512edb6573e7ff23e8ffc69d4b77ae485baaebedeae4777a9ea4d5a714d93216adb4c6c059f53585e0151b9fd2dd20adc9ca6ce4af305f3e7a9920b3306b1f0d396a99bbdd5feb352d82e77ddc4f674121c9880a3039820d5e927d1cf9e7a44d20a11f2f57861f4f84ca7c267069e33478b882afb0b8451735cd3584ccd3f378abb6e295512722e2174e6581f21c6f72066bbd45fb1d0a841d98b598535b1c482c1dfc2aed60589b83de53098a5ce3589acee65bb3cec5fd227598bc295fe349dba65d572", 0xe4, r0}, 0x68) 06:49:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x900000, 0x9, 0x2, 0x77af1247, 0x6}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, &(0x7f0000000100)=0x4) 06:49:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0xfe, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) socket$inet6_udp(0xa, 0x2, 0x0) 06:49:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() r5 = getuid() fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="4ce503a7d9f16b1e000200", @ANYRES32=r4, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="040001000000000008000700", @ANYRES32=r6, @ANYBLOB="10000500000000002000010000000000"], 0x9, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) setfsgid(0x0) 06:49:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x109000, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0xc0000) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9e4, 0x401) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x8}) [ 312.598114][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 312.598129][ T26] audit: type=1804 audit(1554360568.140:218): pid=21190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/262/file0" dev="sda1" ino=16963 res=1 06:49:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x18030000, 0x8080fffffffe) [ 312.730118][ T26] audit: type=1804 audit(1554360568.140:219): pid=21218 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/262/file0" dev="sda1" ino=16963 res=1 06:49:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x400000, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x4}, 0x28, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:28 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000380)=0x4) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/178, 0xb2}], 0x1, &(0x7f00000002c0)=""/2, 0x2}, 0x5}], 0x1, 0x40, &(0x7f0000000340)={0x77359400}) [ 312.906613][ T26] audit: type=1804 audit(1554360568.450:220): pid=21608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/263/file0/file0" dev="loop1" ino=65 res=1 06:49:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x600}) 06:49:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4cf, 0x100) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x1, 0x1, 0x9, 0x9]}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xf0) r2 = gettid() perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x721, 0x4a6, 0x0, 0x0, 0x0, 0x2, 0x20410, 0x5, 0x5, 0x8, 0x9, 0x7ff, 0x80000001, 0xb3, 0x8f, 0x40, 0x8001, 0x1000, 0x40, 0x8, 0x0, 0x3, 0x6, 0x7f, 0x8001, 0x4, 0x1, 0x5, 0x6588, 0x5, 0x5, 0x3ff, 0xfffffffeffffffff, 0x7, 0xff, 0xffffffffffff0001, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x11080, 0x20, 0x706566f1, 0x5, 0xffe00000, 0x8, 0x4}, r2, 0x1, r0, 0xa) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r3) 06:49:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1f000000, 0x8080fffffffe) [ 313.009616][ T26] audit: type=1804 audit(1554360568.450:221): pid=21608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/263/file0/file0" dev="loop1" ino=65 res=1 06:49:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x7, 0x0, 0x4, {0x0, 0x989680}, 0x7fffffff, 0x7ff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x20, 0x4, 0x1f, 0x689c, 0x3, {0x2, 0x57, 0x0, 0x2, 0x7d, 0x2, 0xfffffffffffffffe, 0x4, 0x3, 0xffffffffffffffd1, 0x800, 0xffffffffffff8baf, 0x6, 0x20, "1f2e9d3fef3b7d6b0de0f9649646de0dbfadcac0912b44d411d5a00c867bd68a"}}) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000180)='R\trist\xe3cusgrVid:De', 0x12) 06:49:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x4000}) 06:49:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000200)="6f062a5335f7b4c45dd7ac811242ed4f15ddf0991f042b71f76684869b607dcb5233a0e3bfb29b0895a9ac59abf4211519a4812985c8487c7eca63d931a89e9dc594e7d13b856b307413ae4ccfd26dac7aeeaa3f61c784bffe24ef6d3a44aa9af4f7d11404b42483c425327fccedb61aaab99ce67a373ab6c93e631758a8636eba81b03ab0c18cae4e584a8008fcde6dbf5110a0292e9ee057c2b20673c196ab599caf6e7c54473583e343ba60a6a1e49647957c0acaa7fde9092e32") r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x800) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) connect(r3, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @rand_addr="e92067d5c6418d79a0ee26c4c5e1dbb9", 0xa7}}, 0x80) dup2(r1, r0) 06:49:28 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x4) [ 313.324585][ T26] audit: type=1804 audit(1554360568.860:222): pid=22023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/264/file0/file0" dev="sda1" ino=16657 res=1 06:49:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='system{lobdevcpuset\x00', 0xfffffffffffffffb) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', r2) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) 06:49:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x20040000, 0x8080fffffffe) 06:49:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x400000}) 06:49:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) sendto$llc(r0, &(0x7f0000000180)="c8ff17087b51ba694aae756b656172d25556f6708d98741662d6323704e9dcc2316920bd6bde4102fce5577413f0449d910705fa7d3e423def090e6453adc2c68f0c527879bad190d6db15c5516a92f8fc8a39fdd56380ce619afad834615bffd618f8c72ba1b73cb43d5c3be6f6e147ce853f4837ff23542962fae8d3bfbce2d726ba7377bbad3d0d71a9d0ab78aff6e7fb5c1438aa8ae992de2f7a546c69db3826faf90bcc7ffb94b3cc", 0xab, 0x8000, &(0x7f0000000000)={0x1a, 0x101, 0x1, 0x200, 0x7fffffff, 0x9, @remote}, 0x10) [ 313.442344][ T26] audit: type=1804 audit(1554360568.890:223): pid=22065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/264/file0/file0" dev="sda1" ino=16657 res=1 06:49:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000000)=[@acquire, @acquire, @exit_looper, @clear_death={0x400c630f, 0x3}], 0x1000, 0x0, &(0x7f0000000200)="149c123c18e5849f36e153b9643ea527b1d761ac8977d2325bbce639f5ca539f532a3d2a589bce76fcc9e5114f792ac055afcbe7a69675a9933703a7e6f2578aa17a94308ffe13e1a0901b9144fe4e97ca6a807ded97c4168b4fad296d82004616a59a3283acc274067d45153ac41a33d724589668c1601a6ab9597aa1885aa8bdb184ad227d7375addbaf6a1f96d02540a8fd7aefacb133fd75b9703dd43b0adc4549f9aa08f211c1a19275d828de1ac1aea2020bb0cc112e9c4de095c7eef7201294f51b95d0474295e995da239d7a3afba8166a76798dd76a7483c3d2a813f6ee048f10d0467b94146582097658c41a34c6aad5279e4b5e2504e4e4158b17b184cfe3b49503abf4ab0008946ea3ceaae6993d4763e94d9527caefe6759032aae9587a85d70558f0af6f9c3a7438ac5438965d426c751f8a75ba22f3eeb83521d57aa6db3b64b303e0337ddbf741926b9714df685b87c71151bc732af36461b6b3135cef4079c108409da48517b04026da3c94904002c751bb4f4709a15de55ba8299af9efff4d6080e1776e08e975d476ff28fbe31d18e5ed7dc4f591efd7062b3b2d846ee964e856e05dc3a910990327ec58a622b8a3ecf0ca67e43a082def89ae3046d2a36539f1e8f148e4d0565ef464e591db7aff6ab655c9a89f0f809b90460ccffe9039e11e71dfc03e6394b6bac842b25dde0910008e1c3bcb5ec11c0f0d963d302916337209efc6be893797cccb46257e6dc8d06947140650cb5ecb4b7d751545dc6a43ce554aa0cac3d0bc9a83afeaeff42f98be6046f7b9d900426ce1b6695cca1c9e988c117bb1f4ebfa0faf862133f34a68765c43c7061e552f7dd42cc4edfabea9640a21b2d01b163918609cd3c272d47def7a926fd8b6046b6405952f5eb7ff9036cc9ec03461b2942690d0316e9993846328c86ac6928aef69a78f260fc4bea9017ec1c34428b94287a928c5488475b495804ddfc3f0273f9d5a6f056896be213206052cfe6edf51482017f2a6ec0e1e936c897aa38d8e07e2a18662045127da1920756079c54f28990b35b981318eaf9a8fafb3fc4940daffb3724ba46f9faba27667451ae6206fbf121846094258b281539fb7b4b5a9492bc1e6dcf5c6af5db9ff2137a3ca06597462e8ec8ed2b4d4b851191c48deb9bec029947f316a8844fd4069bd4f7df4350916b7de08a82942a37c712707c8a66fcaf2631b24dfe8f6687ff0b26ad5c83cc8ba1b90ad3a8fe57354f0964302c5009192e674d81a6284ed8bb406a8850b3c02c24701a47d41754b58bf8d786982880fcc6b0c95219d73b8e103bfab58fd2204480feaaed7d50f6575a9b528a6df6d56e399683e0a8db6513a0665900417027c31eab00830e779707910a689e4c9887be21907f1f44c8e000bdb9263186205070b9d6a801d371558de16075051cc7b63c690a3a2e619e58ff85259c4954c68c6585a9403485c90760a5aa24d48d5aa1ef059eaea6f7b4a9b739b84880b149dad1053c256f53065b383a8c146236697a08131e67cc7b3d24597125780dd95748703dcf15d3a7b89d21a7c351c119a03429f54e7071edc9c4c93432fb13e5f733b1118e288ecaf523d7c85417dc8a114b93dd0616c177d5d3abef4bb5913bf5f83407cd56808b320e434836de0a9c8771eb82ca4ccc11cd9025cd471826364913795ee9e00e08a13d0fca80add01877bf6310cfce46c80391a872779d03edff7cdf2b65cdb13887c30e3aadf1b94707b071161496708c01d460f3a44073b79f0184c1487a08479b0b7c876a125ee08cbac9632ac2e3ec638941aa25a30099454258c8cd828189aaf65ddd81649ebd4e9c2365ec22ac1698e967b3658102d991dca35e2ffd7f88e0eb625ed3f111612f73f347357137ed04a8629e42287964bffa2d53ab3170b764e62f44b0ea0c0b79527f94e8160fce61eff395f971c3c8159155ae65d2a60d15defeb4af7e55a878b3522ed0da8384a68515fb4280b84221576a2295e3421ec35af53da3d9a13d27f8917bfad40f14cb0614ef1d3ebd4ded18ed597354df603c0567384db3929d32e849bb1137de8d6f292c0ae12dfa63d4f3612c2ba367352f48e0b1d6a7c963e7089b4668f773e977508e5ea526427d0723e4f1306c7a97d0b76069cb3ad8ac488bd8358a9a93df83191ba8822fa23110d14bb81e083044e2cad3dcfca010f76ea37bef5cae3b6ceebea6b42681b61ed501bade767f3123bd908a721c03cdab51500e33dd3f424878e1991b85157731b1a02dc9ef4754a9328289c3034735312afc63279dc9931f00646b54d0fa4ec297eed828e52c9bd8d5c285adbaddff1e69f4a6f45d1cda5aa6dd08b6fd202f9f8359c88e44303d99efeecfa20fb4c721bc297a889a626e8f431ccc1aa5a1a2f87598265091ce8bb7b1fcbde840de485d82070e2bd9f5429924f5399a33619999c0f3f9d7d39002c3a146f17012cdb81baf78d06732fd1b3d18cb283c7777d3bf5c2b10689cf982a5f7ca98c53cbfb2c9eef2b6af4e0c7e3837f684a771f16121cfb1dab22598a3450c82e3ac56523819e073f20b7654d043e68b3d5b7a009e00744dcee1bd0dd6b32ffcf944a5efc8bdcf5627cf64f6fb32f82e942eb29fcb5cacd62146bdd586dd43e579033dd40603fc8b13489cd323b832742cbf7613d08a7373b520ba1f433e055e41ecc97fb79d6ecb44c45b914324b24d85fb2ebda790fb0d52c6e1cca5bb46092beca81e915f037690fe0f8c1d3232428d01ca7929871be98d15ca0b19d36562618d04b1bd2c4af53d1e76a19cfd97b592b75a04965dfee7a5740e7ff2586823b9d918990a124d1312cab26724a958c7324400db0fe97319ab665a850bde980e08cc0618a4fbb7fda70b4cac1e5dbc1ca9a5f3e9fd9fd2cc5c29f41d6cba4d9f3ed26b148ea40a197cebf9f416127e389dc4da50c61d1d51a01dbeed99ff8cc73d13f3436475191f9437d920e75e03be4b9e6af85cdfe1b457583bef8edbfa68886f599b3c03e8851bbbe151a519f65f9dfb22d00516d538332150dd1806831651295f870b4f2dff6301dee57c31fcac12787e7f8e8c9f1999cb438cb4f0c53cbfa20efc68f8e10941200634051eacef24a1022f5052ff2140804554355fc4cc0580490fba44737f111aef5d2a2a37c0c742774374450b231e124b027a72c02d534d855913005295dbf280d8da992570daa70948289d7c05a1570aeff10498187931f8d7fccc02ed9235d8c9044efb6428be7db9011a93ee5e38d9d863c04a79f4ea843c477f96e0e8262f36a691bf77397233f4be5f9803e1508bfcc7c7596fb8b092826c6595edc8e30ada2ab2cab4f3a48bd6f2c0a0298821316bc6df18ac73784e1db24bc298539564aa27b6d28f000a50cabd0bc5b34731449496b19cda0be45d5ae9f59ac743b9762110fe91b061cb29ed878f8cfcd1101fb598ac2ee5f0c868372d5dd2c6e90eb24ebfad2f596b6231ca5905df125fff059d01490415e2528508234cde0279dd53691c67d3e17b8b94298a3db8389fdb3a229b3f7889bd80c23ed0d3005fe769a38e373cb04628820b2cea1e0db55ccdcf269410a2515d82b5aa972c141d03b0e328222347152a33bb125f18b59ff36c40f29c69a16ce13d602ad55c1fc0fcc4da76d5fb75dd215eef2a9a36574c54e6a6119f1eb56950420b4e16fb62aade93b7a0a6209e8ba3b99b926bdf8f4154236806b8b2c0c38109cd30c2babe4724d4dd4fb982ebc25267624bbd95081ec247a2d164655611616b1eef7eb71532af31356aa704ea2aaed635137807473ae4f2971010adb5dec4551e8e62909f1134ba30f703ac6a6a845bb0c5171f022a2f14fe411aba05a7b8b4fd7dde319aface4150baa707a8a20105228a2f08851123caaa6b7faf8e251adb02af68b82d1b4a6ec0b66487db9af22bf040bb7ffcaa1b3ae6588f0c796fe8277e6425db274ee562f1c445310fc7026fa2160d965d549d49051877e6ff5ca563436566d287c6aad2b96b1cd43a78bf6880d47fe07f2dd337d754e99618c92aa6a8022afcdc234ee5cf80bac48f9010598a33eb83011401d983a8a53e3907cdac91986e7ebd21772cec6c55a426e971feb2de5b56991c800ebd311003fce0bcd6a3a9cb4485f044e18e596323dc8f83a56fdd3f06caf6833b2dfd21f07492eb3158a1891de5102dffccb1c2db62b983503c115f12ca2742661607d62c48ede2d2797300e9a755cf83cf1607ed4915b2198fba7993f4d23c02d5e76c33e1a4965e601c8fb9dfc8caa9ebbb6a015feff034c88a3ef5a50e3b5a246962836ddc536a632dae9e46e5b8dd79a605ae65d4d229e1d779f4ed774deaf0030d5946e2298767d552dba8c721e0b221805bd86ad8498cdda31f0b17a1e505549a955df7f9719761b78030668786c61e8199ec415b35d3922038b228e10e0c53a16d15ed12d604216fff9014c4e501a5dbfc53634b78cee0a1140eb08db81f88d607110826d229982a6b2785d16a85833c95e11e3fabf14de02290eae6fb031d68189d2cc19ee376d8a1b1999a4adbc41db08c285c76d3c471085f39338606757483aee3b34090fecc0d59fefc2fb5df8ac1ee9b45451e2718090879ad6255337b5dfeaa80d108fe719ed6a413616d8cfc566e807adb71d813c6f4b4cb51ba0c691fd024450ec33b2ade16e9b86c512805ccedf228042f8a3ca0c865faa71e94601b462e99df97b01914ffabc8ae95970ab5fb57e74c1196dde7eccc91cc5c31c10e70e345eaf8f585d03a458662ab69ec76205013e9c252d1a43a5b917def451afb09d468c9a9f96d5787979be2c25194a134184cb4ec01b7bd443d6dda0d898ccb58f8c68eee25b328eab98347232c5d007fc070a7b699789988facdb8bf6f29456f1bb4e7be2c3abc45dfc0a67bcdd1e7b8ad865bc2df09e9c5c3631df3810256c849c4fe0f32433e29c6562ff25c299b7d10e2661eec555519e9fda950d5d377a2ab71f8fed97b9e095d6b2bcbc85747dd824fe0ae37f53c9569df416e9f7d60f949c1d37cfaf5f8e722b498138cd7cbd963847110124df4f5595fde6427445eaad0c4a1872063e40697e9c9cd2671a9310838198a11540de72bbe9e8601daec5a91b657589150ada0a7767d87b63320fe61180e6527eb3ade659faacc0ded5a4273ba871760f11889e3291b23e4e380dfdbfe5aa113fe4adec5728be5dfaaeb835dafa49a4eed5084762e2ffb8dd555363132535c9144ce408cae98abbdb1baf8693218096e19b900107183c731091596ba419879de54ece536edcd0a1d3af7c4cb739a7d32ce99fe8aa874b3df8d55ba03c293dea05651eeb78e75a8c8533aa393f30c0e49577ceafb44833c8d6bc485e2476336defc0c78e0486e4923d0e474af21336776e9b6c62fb4bb058c50098955c0a5a7edf345321aa8bb0d880076af8ca4257fdc2fa7e3f18915adeee932e9f015d2c89f296c5db3fa4efd38747053b1d93107fba03ab20a9d1c2b8268397cd56d283f6c6845627c092079e0d61355437fdb399ff5f21496d1e0d2d1dadb4c7a87da115411b98e849a47af840039af69bb861aba38edf697741812e095a6337aa9b14b6826ca2d16327a51cc8c46487c1c3b48e2618f03d6ff49f28833e20b1c52f47aeb125404a19e60c8e23c12e9ff83eb81d725dc847119b02e9ece6f1001806f9c34e002d76c54b5fe40aad64e8092b0b991c9411b71feb1a1f5d8c30b144bb9a586e2e077b8a3f3e265d2dad04ac9f59f718b41e"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000040)={0x8, 0x200000, 0x4}) clone(0x5000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:29 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8000, 0x40000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) 06:49:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x6, 0x4) 06:49:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x80ffff}) [ 313.690526][ T26] audit: type=1804 audit(1554360569.230:224): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/265/file0/file0" dev="sda1" ino=17439 res=1 06:49:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x28050000, 0x8080fffffffe) 06:49:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x194) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033d, 0x40020000000209, 0x0, r0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) r4 = dup2(r2, r3) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000180)=""/119, &(0x7f0000000200)=0x77) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000340)) [ 313.838515][ T26] audit: type=1804 audit(1554360569.250:225): pid=22485 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/265/file0/file0" dev="sda1" ino=17439 res=1 06:49:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80918401}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r1, 0x105, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000014c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x400000) write$UHID_INPUT(r2, &(0x7f0000000200)={0x8, "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", 0x1000}, 0x1006) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000001340), &(0x7f0000001380)=0x4) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x4) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000013c0)={0x0, 0x0, 0xffffffff, 0x100, 0x4, 0x7ff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001400)={0x100, 0x8000, 0x7, 0x8, 0x0}, &(0x7f0000001440)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001480)={r3, 0x8, 0x401}, 0x8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r4) 06:49:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x4000000}) 06:49:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2ec, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x2b}, 0x1c4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2ce8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff801}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbb63}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40}, 0x48080) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:29 executing program 0: clone(0x200000200000ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0xff7, 0x6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) sync_file_range(r0, 0x1, 0x7, 0x3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000100)='bdev,vboxnet0wlan0-\xbd\xc3security\x00', &(0x7f0000000140)='user,!proc*', &(0x7f0000000180)=',+em1\x00'], &(0x7f00000003c0)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='eth1@\x1a^#\x00', &(0x7f0000000280)='eth1(\x00', &(0x7f00000002c0)='%:securityselinux\x10$eth1(*:\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)=',\x00']) [ 314.005116][ T26] audit: type=1804 audit(1554360569.510:226): pid=22838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/266/file0/file0" dev="loop1" ino=66 res=1 06:49:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x109000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x3f000000, 0x8080fffffffe) 06:49:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x30001, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}]}) dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000300)=0x7) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000200)=""/249, &(0x7f0000000000)=0xf9) 06:49:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x6000000}) [ 314.210061][ T26] audit: type=1804 audit(1554360569.520:227): pid=22838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/266/file0/file0" dev="loop1" ino=66 res=1 06:49:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x10001}, &(0x7f0000000240)=0xc) dup2(r0, r2) fchdir(r1) 06:49:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:29 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x0) execve(0x0, 0x0, 0x0) fstatfs(r0, &(0x7f0000000140)=""/185) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) 06:49:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x40000000, 0x8080fffffffe) 06:49:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) r2 = dup2(r0, r1) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x8, {0x7, 0x1d, 0x7acd, 0x40, 0x6, 0x140, 0x9, 0x9}}, 0x50) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000000)) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/28) 06:49:30 executing program 5: socketpair(0xb, 0x2, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x15, "8cee62ccbe4b6913bebed3f62f03183c76cfffb1f5"}, &(0x7f0000000100)=0x1d) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x6}, &(0x7f00000001c0)=0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$KIOCSOUND(r3, 0x4b2f, 0x9) dup2(r2, r4) userfaultfd(0x800) [ 314.440569][T23446] ptrace attach of "/root/syz-executor.0"[7651] was attempted by "/root/syz-executor.0"[23446] 06:49:30 executing program 0: clone(0x8003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3ff, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x8000000}) 06:49:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x85010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x53000000, 0x8080fffffffe) 06:49:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r1) 06:49:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0xfdfdffff}) 06:49:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800, 0x400800) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:30 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x80, 0x0) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x56000000, 0x8080fffffffe) 06:49:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20a000, 0x0) bind$rose(r2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0x600000000000000, 0x14000, 0x81, 0x8, 0x19}) write$FUSE_BMAP(r2, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x1, {0x4}}, 0x18) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10100, 0x0) getpeername$inet6(r2, &(0x7f0000000140), &(0x7f0000000200)=0x1c) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000100)=r3) dup2(r0, r1) 06:49:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80032d, 0x40020000000209, 0x2, r2}) dup2(r0, r3) [ 315.145555][ C0] net_ratelimit: 22 callbacks suppressed [ 315.145563][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 315.157094][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0xffff8000}) 06:49:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xa10000, 0x1, 0x2, [], &(0x7f0000000100)={0x9909c8, 0x74, [], @p_u32=&(0x7f0000000040)=0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:30 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000100)='./file0\x00', 0xff7, 0x20000) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='proc\x00', 0xfffffffffffffffa) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000100)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f00000001c0)='R\trist\xe3cusgrVid:De', r1) setfsgid(0x0) 06:49:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x58000000, 0x8080fffffffe) 06:49:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x8, 0x1) bind$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @null}, 0x1c) 06:49:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0xfffffdfd}) 06:49:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0xfa20000, 0x1, 0x6, [], &(0x7f0000000040)={0xb8096d, 0x40e1, [], @p_u8=&(0x7f0000000000)=0x1}}) [ 315.465524][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 315.471448][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/112, 0x70) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x800}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x7fffffff, 0x2, 0x207, 0x9, 0x2e, 0x40, 0x9, 0x3, r3}, &(0x7f0000000180)=0x20) dup2(r0, r2) 06:49:31 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername$inet(r0, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) connect$rose(r1, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x1f, 0x7fff, 0x5, 0x1}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x2, @empty, 0xfff}}, 0x5d7, 0x3, 0x100000000, 0x7fff, 0x10}, &(0x7f0000000300)=0x98) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x1000000000000}) 06:49:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x59000000, 0x8080fffffffe) 06:49:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x1, 0x74, 0x7, 0x7bd8, 0xe, 0x7, 0x401, 0x4, 0x1, 0x2, 0x0, 0x9471}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20583, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1ff, 0x9, 0x3, "b06a7571c930acc30a402cf1add5b44e6f09936092f54e00aac4ae9381c6804c", 0x32314752}) dup2(r0, r1) 06:49:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xe3, "4d01e81caf6eb5174e6e20afda25ddd2e4e141fd20c6451ebecf9d902807e448e3b068e6ed875ec95a229457408091140bd31671d9724a96b3d55005d9acc6be4859390415665f79d7040ea047a40a1f1dac70a6dc5963b61e06fefea16fd56ed0c28e4080cb6e3de8a33de01b9b4a880ede04ff369be7234b069623ca77dbbc0b23dddb2770ae050d00a6b8acbfe6ab28f0cf2bd5ea01c19524b57720de77ad41688ef153b0059a800852a0a8185f9856a50ed64a2e829e28b98cdb50079347bf90903d79985fdba4ce9444ccdc63ab85b17e57d2922267e79b8fdcf1c95242dfd628"}, &(0x7f0000000040)=0xeb) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0xe6, 0x20, 0x0, 0x2f90}, &(0x7f0000000280)=0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 06:49:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="08d0617f8f32dff1190b823f5d16c604b8f224ebe8321aec1f2406f0629ba390a1ac3b0314c52e516d2241a46db84287c11bfbdf94152a4f597be6f4aa25300da1a3010e0768c7de52eda3a51a3491532acd8c65f8511ed1bb86820d52d09ad23c198ced89bfc87d8ebb7d1117a8b0", 0x6f, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/em0!\x00', 0xfffffffffffffff8) keyctl$link(0x8, r1, r2) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000200)={0x7a, 0x3, 0x0, 0x197}) setfsgid(0x0) 06:49:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x40000000000000}) 06:49:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = socket(0x1, 0x800, 0x202) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd7280c228188aa7f}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) dup2(r0, r2) 06:49:31 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x284080, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x88000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x20000, 0x0, [0x8, 0x7, 0x8, 0x2, 0x9, 0x0, 0x10000, 0x4]}) dup2(r0, r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)={0x0, @aes128, 0x2, "0c072a1e9f6f413e"}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4000, 0x0) 06:49:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5c000000, 0x8080fffffffe) 06:49:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r1) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x488540, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@reserved}) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3f, &(0x7f00000000c0)=""/61, &(0x7f0000000100)=0x3d) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@loopback, 0x4e21, 0x4, 0x4e23, 0x8, 0xa, 0x20, 0x20, 0x6e, r3, r4}, {0x400, 0x7, 0x812, 0x0, 0x5, 0x5, 0xeb3, 0x1}, {0x7, 0x2, 0x7, 0x1f}, 0x100000000, 0x6e6bb6, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d5, 0xff}, 0x2, @in=@broadcast, 0x3501, 0x6, 0x2, 0x4, 0xda, 0x8001, 0x67}}, 0xe8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x40c0002102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getgroups(0x5, &(0x7f0000000340)=[0xee00, 0xee00, 0xee00, 0xee01, 0xee01]) fstat(r0, &(0x7f0000000500)) getegid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r5) 06:49:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 316.185554][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 316.191419][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x80ffff00000000}) 06:49:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5ca5a8cc, 0x8080fffffffe) 06:49:31 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x40400) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000100)=0xffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 316.345539][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 316.351391][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r2, 0x401, 0xffffffff, &(0x7f00000005c0)="02c261dcdb162786635acdf5a146f9dde4474ab35854a6aa220559f7abaa34d5c20f81806ccf7d26c0628450ba8480afc0e8938060f452546797cf0926df0b6b949f71895a03812734ad47d2def8382f01", 0x51) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="6bfffffe", @ANYRES16=r3, @ANYBLOB="000a2bbd7000ffdbdf250b0000005800050008000100657468000800014701acf342114e9800080001001c00000008000300810000000c00020008000400590000002400020030e271b937fcef1b08000200f1ac61db46d61900f33e3bd9000008000100060000000800"], 0x6c}}, 0x40) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x314) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x40000, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) r6 = syz_open_dev$radio(&(0x7f0000000500)='/dev/radio#\x00', 0x1, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000580)={0x4, 0x40020000000205, 0x800000000000, r6}) mq_open(&(0x7f00000003c0)='\x00', 0x80, 0x1, &(0x7f0000000400)={0x7485334, 0x3, 0x8, 0x80000000, 0x50, 0xffff, 0x20, 0x2}) r8 = fcntl$getown(r4, 0x9) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000740)='trusted.overlay.nlink\x00', &(0x7f0000000780)={'U-', 0x132}, 0x28, 0x2) signalfd(r7, &(0x7f00000004c0)={0x2}, 0x8) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) kcmp(r8, r9, 0x0, r6, r1) r10 = dup2(r0, r7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) fcntl$setsig(r2, 0xa, 0x2f) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f00000006c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000540), 0x3, {0xa, 0x4e21, 0x1, @remote, 0xfffffffffffffe00}, r11}}, 0x38) write$UHID_CREATE(r10, &(0x7f0000000180)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/12, 0xc, 0x6, 0xf4ef, 0x8, 0x4, 0x86}, 0x120) fcntl$setlease(r2, 0x400, 0x1) 06:49:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffffffffffff, 0x101000) r3 = dup2(r0, r1) creat(&(0x7f0000000340)='./file0\x00', 0x6) flistxattr(r0, &(0x7f0000000240)=""/220, 0x1d) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000200)={r2, 0xcebd}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6ed6f45fa931a5"]) 06:49:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x501, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x252}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x400000000000000}) 06:49:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x5f000000, 0x8080fffffffe) 06:49:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000940)=0xfff, &(0x7f0000000980)=0x2) r6 = syz_open_dev$adsp(&(0x7f0000000800)='/dev/adsp#\x00', 0x9, 0x404100) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000840)={0x9, 0x1, 0xfffffffffffffff7, 0xffffffff, '\x00', 0x7}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x81, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000280)={r9}) ioctl$RNDGETENTCNT(r9, 0x80045200, &(0x7f0000000240)) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008010}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@polexpire={0x224, 0x1b, 0x100, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20, 0x3, 0x4e22, 0x3f, 0x2, 0xa0, 0xa0, 0x87, r3, r4}, {0xfffffffffffff8a5, 0x9, 0x1f, 0x100000000, 0x5, 0x20, 0x80000000, 0x2}, {0x3, 0x4d, 0x1ff, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x8000}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr="16358816ae1b60b09cadaf2852b356a1", 0x4e22, 0x8000, 0x4e22, 0x3, 0x2, 0xa0, 0x20, 0x3d, r7, r8}, {@in=@rand_addr=0x3, 0x4d2, 0x2b}, @in6=@local, {0xfff, 0xf00, 0x1, 0xff, 0x5, 0x67c, 0x5}, {0x6, 0x2, 0x1, 0x9931}, {0xf4ff, 0xffc, 0x40}, 0x70bd28, 0x34ff, 0xa, 0x2, 0x7, 0x81}}, @replay_thresh={0x8, 0xb, 0x2}, @migrate={0x30, 0x11, [{@in=@remote, @in6=@ipv4={[], [], @rand_addr=0x2}, 0x2b, 0x0, 0x0, 0x3506, 0x2, 0xa}]}, @sec_ctx={0x40, 0x8, {0x3b, 0x8, 0x0, 0x0, 0x33, "c87d4f8e6f9c3c8018b65b846d6b915af9ce61a0dca3a065dec968c5a973bb6d6abb2dd6f04c8c1345803d6e2ec5dd545da61b"}}, @etimer_thresh={0x8, 0xc, 0xfff}]}, 0x224}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) renameat2(r9, &(0x7f0000000880)='./file0\x00', r9, &(0x7f00000008c0)='./file0\x00', 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x5, 0x4) dup2(r0, r10) 06:49:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x600000000000000}) 06:49:32 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x400000) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000100)=0x5) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x3) r3 = dup2(r0, r2) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x3) [ 316.825539][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 316.831459][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000340)=0x100, 0x4) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000040)=0x5, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) sendto$rose(r1, &(0x7f00000000c0)="dfb97716b8e1cfb8494930c57623822ccefc4201fa97bfbf19477551c0ba07ee84767935b0b25a23560f0569a6a01a53369ab9a028ea67e4fc4929c4311b8844329a93f316ff2f3c618d832285f13e851f5bb3df9b7052240bef76530cdf3c009b1ff27ce4540fa51ad8dd55eceba84530a211946ff02b8be03a4f7e1405f91dbcc70c9797f16b7edd52ea5e493aaf2b31582d387bf58c75391f90d4ce64e3fae34273e2848a59271b968f19db7d529da69fcaacf509ae75b5e3deaaa604e845c7eeeee3ea6bfa4551e237572f750aafe1e54cb922b7eef26cc1f4fe5c6bf073ef78cd4ebea9e5cdccce53c51f9d97c89027c2f2e599d7a436", 0x60, 0x40000, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000280)={0x4, 0x1000, [{0x1000, 0x0, 0xfff}, {0x6}, {0x1}, {0x1, 0x0, 0x7ff}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000300)) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$netrom(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x60010000, 0x8080fffffffe) 06:49:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r4, 0x30, 0x1, @ib={0x1b, 0x4, 0xea, {"9d908385c41639b56500774253edfe6e"}, 0x6, 0x8, 0xa6}}}, 0xa0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @sack_perm, @mss={0x2, 0x1f36d871}], 0x3) 06:49:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x800000000000000}) 06:49:32 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, r3, {0xffff, 0xf}, {0x3, 0x2}, {0xffff, 0xb}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x8000}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x50) 06:49:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x101000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x88033f, 0x40020000001209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x4, 0x401, 0x9, 0x0, 0x9, 0x9}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0xfdfdffff00000000}) 06:49:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x62000000, 0x8080fffffffe) 06:49:32 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2000, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0/file0\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x90033d, 0x40020000000209, 0x80000000, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={r3, 0x12}) 06:49:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xfffffffffffffffa) dup2(r0, r2) r4 = getpid() sched_getscheduler(r4) 06:49:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0xfff, 0x2, 0xfff, 0x2bcc}, 0x10) 06:49:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x65000000, 0x8080fffffffe) 06:49:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x4}) 06:49:33 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x13, 0x20, 0x1, r2}) socket$inet_sctp(0x2, 0x5, 0x84) dup2(r0, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:49:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 317.875848][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 317.875862][ T26] audit: type=1804 audit(1554360573.420:247): pid=27082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/278/file0/file0" dev="sda1" ino=17442 res=1 06:49:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x6}) 06:49:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='.+\x00', 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000100)=0x68) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)=0x0) ioprio_set$pid(0x3, r5, 0xa302) r6 = getpid() setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10) r7 = getpgrp(0x0) tgkill(r6, r7, 0x8) 06:49:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x68000000, 0x8080fffffffe) 06:49:33 executing program 0: clone(0x200020803, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.SMACK64\x00', &(0x7f00000001c0)='\x00', 0x1, 0x2) openat(r0, &(0x7f0000000140)='./file0\x00', 0x200, 0xfffffffffffffffe) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x5, 0x6}) 06:49:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) open_by_handle_at(r2, &(0x7f0000000100)={0x66, 0x7, "5bc4a7e5448efb3839c2761cf46bad3e33797dc2ca07d4bd331ab8d6d0866339b88ba63ba6be7804f6de5be8b4f9b52adc66a5237751d52e2a9478567c7564b001836d4751003aa25b14b0158c5f667c76712d9edf469b672a368317d81e"}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=@srh={0x7f, 0x2, 0x4, 0x1, 0x80, 0x50, 0xfff, [@local]}, 0x18) [ 318.034261][ T26] audit: type=1804 audit(1554360573.460:248): pid=27218 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/278/file0/file0" dev="sda1" ino=17442 res=1 06:49:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0xede6fc360e367621) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x81, 0x8, 0x5}, 0x6) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x2, 0x40020000000209}) dup2(r2, r2) 06:49:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x8}) 06:49:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0xde, 0x80000000, 0x1, 0x7fff}, 0x6) dup2(r0, r1) [ 318.292006][ T26] audit: type=1804 audit(1554360573.830:249): pid=27570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/279/file0/file0" dev="sda1" ino=16641 res=1 06:49:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r1, &(0x7f0000000040)={0x9}, 0x8, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x9, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000180)="53289fc2a6cfadf3989f947c8a7f762bf1cfb8c0d7929d100721bbf78d84fd2c4b7ed95ef9df97eda2600129c4430919d3715cc1ffc65ee4001dd1b69ebd1f95063e2cb8988e209b42477af4acf3c75a01306097430331194c716f58489a3547feef187ac27de34fedf7ad377cccf158deb3e774a970bf2d1a6f22c733bf560153261e2a74967b59b38a4c7de037c7efc4fca55f5df114fe49e1241128e765f20597cb080d17d8412b") r4 = fcntl$getown(r1, 0x9) sched_getparam(r4, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, r1) 06:49:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x68020000, 0x8080fffffffe) 06:49:33 executing program 0: r0 = socket$inet(0x2, 0x6, 0x3) clone(0x4000000000008003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x100000004, 0x84000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000004c0)={0x1, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000150000003ea1c1e0b6e35fc6dcea184de5054412700af569f44fa451188842e948ab139ef82cb4bd446f099c4b8441b37de4db64d58d40d696cfb40da450c3d6f3ce1be5daca9e70fff537ee0ad6d59a43d555232aba60bcc2325c206e14fc1f"]) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000400)=""/180) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffc, 0x47, 0x4, @buffer={0x0, 0xa2, &(0x7f0000000140)=""/162}, &(0x7f0000000200)="3d27c729fd7dc99c8b5e7310914de4fcf4151b8d18c03897bac312604cceb64f052f42cd85454f5171f59f0c1914c1db2b5bb6894a3ba72854a6f1e2765d2ed1bb0ab164dd3df2", &(0x7f0000000280)=""/83, 0x9, 0x20, 0x2, &(0x7f0000000080)}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @remote}}, [0x0, 0xfff, 0x3, 0x2, 0x91, 0x6, 0x6, 0x800, 0x1, 0x2390, 0x8, 0x9, 0xffffffff, 0xfffffffffffffffa, 0x775]}, &(0x7f0000000600)=0x100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000640)={r2, 0x957c, 0x2, [0x80, 0x80]}, &(0x7f0000000680)=0xc) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x8, {0x9, 0x3, 0x3ff, 0x800, 0x45cc, 0x2}, 0x1, 0x1}, 0xe) setsockopt$inet_int(r0, 0x0, 0x35, &(0x7f0000000040)=0x1000, 0x4) 06:49:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x600}) 06:49:34 executing program 5: r0 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @netrom, @netrom, @rose, @default, @default, @null]}, &(0x7f0000000100)=0x48) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x2, 0x2, 0x8f1b7ea, 0x5, 0x5}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r3) 06:49:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, r1}) r3 = dup2(r0, r2) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000014c0)={@remote, 0x0}, &(0x7f0000001500)=0x14) sendmsg$nl_route(r3, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) [ 318.601432][ T26] audit: type=1804 audit(1554360574.140:250): pid=28073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/280/file0/file0" dev="loop1" ino=73 res=1 06:49:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6b000000, 0x8080fffffffe) 06:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x688) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_unlink(&(0x7f0000000140)='R\trist\xe3cusgrVid:De') request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) setfsgid(0x0) 06:49:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x4000}) 06:49:34 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) [ 318.710384][ T26] audit: type=1804 audit(1554360574.140:251): pid=28073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/280/file0/file0" dev="loop1" ino=73 res=1 06:49:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10a00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, r2) 06:49:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r0) 06:49:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x400000}) 06:49:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8002, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='R\trist\xe3cusgrVid:De', 0x12, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x271, 0x1f, 0xfff, 0x3, 0x0, 0x0, 0x8000, 0x5, 0x200, 0x5, 0x7, 0xfffffffffffffff8, 0x0, 0x1, 0x2, 0x0, 0x7, 0x2, 0x0, 0x10000, 0x9cfe, 0x5, 0x10001, 0x7, 0x3, 0x4f4, 0x401, 0x2, 0x5, 0x2, 0x81, 0x0, 0x9, 0x7f, 0x7fff, 0x7, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x4c00, 0x1, 0x80000001, 0x0, 0x9, 0x1, 0x2000000000}, r3, 0x3, r2, 0x1) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000300)={0xffffffffffffff7f, "9253b982ed3c3db8b7e122c07659aafd840336c17e734328e86fb7ddcaed7fdb", 0x0, 0x70d3, 0x1, 0x800, 0x420, 0x4}) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000480)=""/203) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x2, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x18) ioctl$sock_ifreq(r4, 0x8994, &(0x7f0000000240)={'rose0\x00', @ifru_ivalue=0x7}) 06:49:34 executing program 0: clone(0x400040002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000140)='./file0/file0\x00', 0xe08b, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x200, 0x40) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0xffff, 0x3, 0x2, 0x0, 0x0, [{r0, 0x0, 0x3ff}, {r0, 0x0, 0x1}]}) [ 319.006160][ T26] audit: type=1804 audit(1554360574.550:252): pid=28551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/281/file0/file0" dev="loop1" ino=74 res=1 06:49:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x6e000000, 0x8080fffffffe) 06:49:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) getresgid(&(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001740)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001840)=0xe8) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x800, 0x8, &(0x7f00000015c0)=[{&(0x7f0000000180)="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", 0x1000, 0xbb}, {&(0x7f0000001180)="72122dde4c4c7eba9a9a02a4927780316bd5f4a1a7c2bcea33c4ea1e701a832c9091bc084e5a9e91685b712b0ca4", 0x2e, 0x44cc98a0}, {&(0x7f00000011c0)="7d0d7459d3424dbb6a2ed03bf19eb1ab894624f0251a0cd899c098e00b0d3b111d1aa626d4410b138b6104751808f964f1091c4f1362ced41afe132074743c6e3fa2daa43089b3533a2261e092ec9a8e5f5975063632b8a6828462b5b5da359588820d0329a555ef3b7144df212f87ab0f7a60367eef07019d575436520bf0d72f0faceee7b31d9bc140a08b93ff36bdfd9e1b50591bd0d509ee1181d5eb7de33c5153a57cbf10068cd04c7a8a6b06905123b0ef4451d18138b9c940703d93c2c4a99f60ac9ca70f86c16b0b42d78a04dc204a9bdf241319821c4cfb1b", 0xdd}, {&(0x7f00000012c0)="328a4af28e6f203b682aeb6ee9591f733384657288033199503ff1e28739b470c5817f99d9c7a07bfa55cb045783ef13cd4e26863b62a2d334c8bc163abbb99800e3b1af59639fb291549ad88ca1f83290579134cb9030143811874b54d63033fe6f8e72f49634307d6361e4beb45d4e98076b024c38c81a2827e1978a2257ae911055fc3a2888062a", 0x89, 0x8}, {&(0x7f0000001380)="38d686ec7ab78b70ef681174ff4b728d059fe27b93a32dd33b8a466773b6e7ecc5b23f2885f1cd00e1117bea307f", 0x2e, 0xfa41}, {&(0x7f00000013c0)="de064a5d7a2d7f83402a413b33ef4dbc0a247624ed291676fe7d9c242e03b903999a4efab430e0b3689122894782fe72de152b6ac1bc9f5ae5a14099aa0d99f772a7a858f2a1ecc00c86764fdf22a99f91e6428c7d5ee4692bdaf8d08a46a43184125c090f5056e61ba524b8f0bcf6c1f7d2c7879a3b4d26fbc039b419aeef52ee635619df4e3118314f86a3fb0b616f7b885ec3aa1213b6bde823f0d4df8bb2c979e3bd80e2d423c43bf04eae", 0xad, 0x2}, {&(0x7f0000001480)="320e3091e6c2d5311d74b9b9dad26bdeae137cc89de9eebcd308941366b89bf0fcdbe87044ea114d7f2ca379e8cd037e1c9a85f0d474fc7aa7c4a24778f9850a4e5b187579057a4be7d15fec7c9fda44a5868648746d9a76fb005aa1e3748fcd6b7d5724d93065b37f13117d44b534f18423a8067e001bf3796456c5f370c95da7a31894d10353622ad316fda89c13c9851115bb2abbaa2eab2be3857556e3faac971eabd11312469b5aad14a52238663d6ca3363bac13b199cab6e1c546d605a96ffcf38d2b2ce624fcfece4cfcaee8d1361b723a1543550014ca63cda320940d6880bc6324ddf5c437738c5aea71b7e31d", 0xf2, 0x4}, {&(0x7f0000001580)="6d2fcaa4ac011c71f0a856a25e15b8ee29093c45289963e146db7fb76dfd38d4f0a8", 0x22, 0x95}], 0x8000, &(0x7f0000001880)={[{@resize='resize'}, {@usrquota='usrquota'}, {@gid={'gid', 0x3d, r4}}, {@nointegrity='nointegrity'}, {@integrity='integrity'}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@nointegrity='nointegrity'}, {@errors_continue='errors=continue'}, {@errors_continue='errors=continue'}], [{@euid_eq={'euid', 0x3d, r5}}]}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) 06:49:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x80ffff}) 06:49:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) dup2(r0, r1) [ 319.248852][T28905] jfs: Unrecognized mount option "euid=00000000000000000000" or missing value [ 319.277052][ T26] audit: type=1804 audit(1554360574.820:253): pid=28912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/282/file0/file0" dev="loop1" ino=75 res=1 06:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x70030000, 0x8080fffffffe) 06:49:35 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "d6ee46592f512a1685e3685c3385f287"}, 0x11, 0x2) r0 = dup(0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x343340) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x80000000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 319.413078][ T26] audit: type=1804 audit(1554360574.850:254): pid=28912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/282/file0/file0" dev="loop1" ino=75 res=1 06:49:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033d, 0x23, 0x0, 0xffffffffffffffff}) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)="a0e10b5be480449369cad4fa89442f2ab4277993cd93199bcddcd21c53f5d372d9c28cbfb45d282b1b5ed5134f4635e917b7381b46258f53e2a1b4d7d141b553ce4f7b13418b368a236485af", 0x4c, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r4) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000200)=0x7f) dup2(r0, r3) 06:49:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x4000000}) 06:49:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x20200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xc4, "cbc18b98217b5b272c1ee84d3dcee10a060c0baf6468b96de1bfa2ada3148f10070f3ad4918d5905efea9539e8e7ea6c8af28b85ab8fc5ff43d2105802d76b0d5423565ee74ac66838fe5d6232b191dc546d79a23c70906b0a74f709470fdfc04bd30de0a25f4eaeeed9bf4f5772f4f55db3f6fdc90bb9e486ac35bb3d2308e5c7640f50ae6acbce018a455fd307fbd4b72b3cb75f54971b7218fce5b85b7b104683ffc6ca90f771a5b61042375451c2cc16f01cd777f8d3dc182a98bb2a4a54b4d7ace0"}, &(0x7f0000000140)=0xcc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="00000400ab00ff030d020000c3e192184dcc274465954a76321379c3bf4ba888dfce799d48a26f56c46b979d88d4cb9d02dfe52722b081f3b8e915b301c0a5e3bf285d8de102a82cee39cdca063ba21dc891f40f28a4599a501bdd15a92a5a517123b635da1f33fc6b37b8ff882d1924192ec66dc39ebcb5"], 0x10) setfsgid(0x0) 06:49:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x5) ioctl$RTC_UIE_ON(r3, 0x7003) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r0, r2) [ 319.631141][ T26] audit: type=1804 audit(1554360575.170:255): pid=29318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/283/file0/file0" dev="sda1" ino=17465 res=1 06:49:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x71000000, 0x8080fffffffe) 06:49:35 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r0 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={r2, &(0x7f0000000280)=""/177}) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/213) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:35 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x12, 0x2, 0x3}}, 0x14) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/44, &(0x7f0000000140)=0x2c) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"616ade29b291cf726fddf14e0ab2a94d1d22e62d87c1bfb25973314aa34f60101788ea1c7d6442a4af92617f2b2de23852323cc0bfb57474dc256806870320293aa3e42d2df86d4d0e476ec2cdce9daf6349611c2f58413a95a7758144f68d4848f474f0b2951b58585fd57d38dc9aeec714e35da60b33ac04311991231e2215af3d354dce5e0838e36f5f5cf08d1c002af0368a356e4697ad0ba01f41adca2324193034537b1c9fcd5e544d89ebd80b5f40ad6bbc41e4d64f5ff75b5014ab867f5399486a60f016f1ad472ec93116a98cf319abc2b2cf3d83041252923a79c67de35b005e97c82cd4a48b9348f669c1aa7e2d9740299a6833ce3364aa89d40a4533b2dfefc6ffe67d626b63acb326374af50dc40a51d48816201eb9d8e71e34cb56a1a2ea11d6f4a3ae29e1d8ffdda63e36ea3d973ae7d182c8e6a4e0bb96a74d10e8ab3b49605d1a568494d58e79c57d89767aa3fd540a9908a484b1ec6ae66a4bf2a58051d102f59ee623a382aa5b88d7a1f9ed91cc02688075c0300449267a515b3a76564074d07cbee3778ae1a90570bdef88a2ef8ddb9d6870c685388f91c1bb5513e45db26670d792b6ab9bd7e31b169b73462e58fdfac101bee33a95724882089ee5d7ce9ee14973225113d42f6eba7bd93116c19507026c1f93d7ef07f8b039ae68017ae8d89d8e8a68231df58fe1a8cae8aa0d93b2a7e234c40b1c1d7e2029f25212de3380f74b5f9ffc493e81fac4d6e25978b067f3b5a3a5d25d461c34f6363666019c50effb62978bd93ca02dcca24e8ceb3904f27b6602c32c7c109ad5ab41239af46524190377ffd39e616524d722c0d850d7bc1ac1b737da2f5cb3290c726fc3e78a56af365a3987095178796640042a7626e989720392c2e372f31e5e30367b94caffa0ed133d9b58b6111aefeaca1c9a388245e798b31c4dea9debe7f5f0fdd54a60363e63349bd8f3deeaae551ef359dbf21b8944f3e3cc580bc8318f9f86b8d278f9dd58d201aa56a62813d192dc00b7736c914467c31165bc89d9e26afa31f564f3fa3b9301df3e82e5a7f4ffaf8688f8de3b558c473725c43523e787776ce70030cd0cd06b5dcaeadd6ad629623d2adc47600b267c9dd7c96424c7f84a26f795bde6ba4f5e505fc7f7a90574ea05afa38235dc5d09bd98a18b636a7a6190c5983a71cfc36eaaaaa8dafe45aa576828c9cea3d7824407504155ebd6093e3bbb3b69cee7ef82cf3c20bd7be0fb85e305432f96548f05ddaaf3638b3d34a7d99f08c2894fa9d1f8ceaf8a584501b8447b6ee05b84ba8bac41614c635048e4731ecd57d4605d31a5c46541e83bff89057ace1123a94a9fe6ca985e3c7f5714923ffe959d339f7bbb6d52f859fd9107072d92a8fe267e4c5305901c7f53466258be9bebf772ee6c33cf55442bc86f46989a652a7832ca25"}) [ 319.744525][ T26] audit: type=1804 audit(1554360575.200:256): pid=29318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/283/file0/file0" dev="sda1" ino=17465 res=1 06:49:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000000)=0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 06:49:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x6000000}) 06:49:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) fchmod(r1, 0x80) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200000, 0x0) 06:49:35 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000180)) sendto$rxrpc(r0, &(0x7f0000000100)="8a7d3a58877d6cdf975e62996fbd01648d0291812fa03a3d6c96e28aef7e283c579a3b74ef8effd8493ceb44a48a6e0ca6667802dbf2d54a1fa432dc5175ef78df", 0x3f, 0x800, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) 06:49:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x74000000, 0x8080fffffffe) 06:49:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x8000000}) 06:49:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) set_tid_address(&(0x7f0000000100)) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e23, 0x2, @rand_addr="76aa9634d3d2e2065944f6193c2f55c6", 0x7}}, [0x1aa, 0x5, 0x78f, 0x400, 0x7, 0x6, 0xfffffffffffffe01, 0x7fff, 0x6, 0x80000001, 0x5, 0x133824a5, 0x8, 0x2af4dc2f, 0x1]}, &(0x7f00000002c0)=0x100) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000200)={0xfb3, {{0xa, 0x4e23, 0x0, @mcast2, 0x9b85}}}, 0x88) 06:49:35 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f00000042c0)=@x25, &(0x7f0000004340)=0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000043c0)=@security={'security\x00', 0xe, 0x4, 0x358, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x4, &(0x7f0000004380), {[{{@ip={@multicast2, @empty, 0x0, 0xff000000, 'tunl0\x00', 'ifb0\x00', {}, {0xff}, 0x5c, 0x1}, 0x0, 0x98, 0xe0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'hwsim0\x00', 0x8}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0xff000000, 'netdevsim0\x00', 'vlan0\x00', {0xff}, {}, 0xff, 0x2, 0x9}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x2, 0x6, 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ipcomp={0x30, 'ipcomp\x00', 0x0, {0x4d5, 0x4d2, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x10001}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80001, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0x4) [ 320.345526][ C1] net_ratelimit: 18 callbacks suppressed [ 320.345535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 320.357102][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x77000000, 0x8080fffffffe) 06:49:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0xfdfdffff}) [ 320.505520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 320.511386][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:36 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000860], 0x0, 0x0, &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'mond_slave_1\x00', 'vcan0\x00', 'syzkaller0\x00', 'bpq0\x00', @local, [], @dev, [], 0xb0, 0xb0, 0xe8, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x5}}}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1f0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xef}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xc7, 0x95, &(0x7f0000000180)="a8511c222882af910adf1b5bf35a82c038588ef35a142d1511d0563ce1dfad629d4964032f0c5ee5c2b3c11526cd62253b6a34d845d90537319ac6a66bbfbeedd765ac9572a93e38608355af0fabc3c151cb2dd5d073ebe274bd64276aa642ba2838c80431ab8685ff898778bb37c18f8c7ea56bebfe0e9965addb118b552c3a7eb1298bea8234852219549c64e5cc852f6e779b6dab69c6ebc8bd3c31d0f9c019798ccfa828761ac6f48597db8562893adf412dcdcf27ae3307ff0b36b92dd661909a9ed68535", &(0x7f0000000280)=""/149, 0x100000001}, 0x28) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) setfsgid(0x0) 06:49:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x78040000, 0x8080fffffffe) 06:49:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 06:49:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x4710, 0x208, 0x46a6, 0x80000001, r2}, 0x10) 06:49:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0xffff8000}) 06:49:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xfffbffffffffffc8, &(0x7f00000000c0)="dc0326f204") r1 = accept4$netrom(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x80000) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000002c0)=""/123) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000140)) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) ioprio_set$pid(0x1, r4, 0x0) pipe2$9p(&(0x7f00000001c0), 0x23bb9e3ee8bfc8c3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x76, 0x278842) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000100)={0x0, 0x7fff, 0x4, 0x4800, 0xffffffffffffff9c}) 06:49:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x480, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) [ 320.985718][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 320.991754][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffff3) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 321.065521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 321.071660][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x7a000000, 0x8080fffffffe) [ 321.114113][T30898] Unknown ioctl 1074025833 06:49:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0xfffffdfd}) 06:49:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x200, 0x8, [], &(0x7f0000000040)=0x401}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) inotify_init1(0x80000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 321.204878][T30898] Unknown ioctl 1074025833 06:49:36 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x202000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)) dup2(r0, 0xffffffffffffffff) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) 06:49:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x80050000, 0x8080fffffffe) 06:49:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x1000000000000}) [ 321.385562][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 321.391411][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r1, r1, 0x80000) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000000)=0x480, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000180)={0x22d, 0xffff, 0x9, 'queue1\x00', 0x2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xfffffffffffffffb, 0x2) dup2(r0, r3) 06:49:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:37 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) accept(r3, 0x0, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)=0xffffffffffffff70, 0x4) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000200)=ANY=[@ANYBLOB="090000008a00000095d9e6416a5f0206e4ba81798276a032785ed46553fb86e5f5136875d9cfe849abd7a83d7056736108b4a8d433941dbe988e6639de308e75b03bed57995eff969666fbdc5c68cbe74779553583242ceb644897db012c79b93445058b3e88bb27d0896da2a076d4481ee7363948da9f5fa92e66500f78626453f6980764ff8f09caae166952afdde3ec57"]) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000100)=0x2) 06:49:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x40000000000000}) 06:49:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x5, 0x13e}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000100)={0x2000000009, 0x5, 0x100010001, 0x7}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000180)=""/19) write$P9_RLERROR(r3, &(0x7f0000000040)={0xf, 0x7, 0x2, {0x6, '{self-'}}, 0xf) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 06:49:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xb0000000, 0x8080fffffffe) 06:49:37 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x77359400}}) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) rmdir(&(0x7f00000000c0)='./file1\x00') ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x4, 0xc, 0x3}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 06:49:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x493e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb815}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x8000) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x52, 0x43f3, 0xffffffffffff744a, 0x7, 0x0, 0xfffffffffffffbff, 0x800, 0x6, 0x1, 0x0, 0x4, 0x952, 0xf3a, 0x7f, 0x4, 0x9, 0xf8, 0x2, 0xff, 0x2, 0x7, 0x8, 0x8, 0x3d7, 0xffffffffffffff83, 0x7, 0xfffffffffffffffc, 0x5, 0x40, 0x3, 0x10000, 0x2, 0x8, 0x40, 0xfffffffffffffffd, 0x100000001, 0x0, 0xc47d, 0x2, @perf_config_ext={0x2, 0x10000}, 0x1, 0x3, 0x0, 0x7, 0x3, 0x6, 0x4}, r1, 0x6, r0, 0xa) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x404402, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000200)={0x7, 0x6d, 0x1}, 0x7) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f00000002c0)="f11d410afba599aa468a5c884f96ffd810b37ccdf209ab41494c99d4c5b37b0ef09c55f72e7cba976dd093073d5bb29aefc67bec937324783c403be9a4cd4013a49b165d715196b0632e99f4fabbb6229c70aabc36ef3286361998127e82c79cdd4a0e214bd6bded77d0dbac930805165994b9529765b2eb91406c2a6928d6ddd24b9d682aabe2a43f148b5f9ffc57d669f5d645a26737fed053d4527e6b2796f3023b46f57beed0d3ee488fdcb53333dc58e09b04dfc54d100c276a94100ef0d93a1bb9642b12c6c47d1365fca95ea10c9229262ee5701f37c8638be4e6b80dde6cfb2766b3eaed1ec77e38c68dc6", 0xef) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) dup2(r0, r2) 06:49:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xb8010000, 0x8080fffffffe) 06:49:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x80ffff00000000}) 06:49:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fffffff, 0x182c0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, r2}) dup2(r0, r3) 06:49:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x8000, 0x1000, 0x4}, 0xffffff40) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r3) 06:49:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000100)={&(0x7f0000000080)="d2639631f1ebe5b1ab7b34ccd8d656175e8be9e346483c157ecd63781f5ee86a69d49bcb58d93cff140f483b2ece3bac9167c6fe34ae681e1c081b01d7f621b8a3b0d859a60b86fc068b", 0x4a}) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) connect$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x1, 0xfc1b, 0x5, "7809cc8e7df2a9ed642b4c841b52036bc51dce0a63614ff5944d851b5fe14b1e84b74a4219c745da0588d61f822950040fe5e398db81ef86b802b1fedc1e1e", 0x32}, 0x60) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:37 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x4ef42) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x16) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xc0020000, 0x8080fffffffe) 06:49:37 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r1, r3) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000240)=""/204, 0x12000, 0x1800, 0x1}, 0x18) 06:49:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x400000000000000}) 06:49:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) migrate_pages(r3, 0xe8, &(0x7f0000000040)=0x5, &(0x7f0000000100)=0x7fffffff) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f00000003c0)='/dev/ion\x00', r4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) gettid() getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000011c57626afebc4b59a030fac4578762a784e059e2d57f4749f2fb8587f5b46a9b1174dd99e322f28b9aec19c8867720e72d5d066e68d9b93e00560aa0fdf0d021391b05722ff3e1f24c46d8b8c0573f836bf30b2bcfeeafd7163603f38a3a613d44cb000edd4fed204bd39f6daee1151eb5a1c19f30457de90884c5ed2e1c6d25f01", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={r6, 0x1}, 0x8) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7) dup2(r0, r2) 06:49:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x42b, 0x402680) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000180)={0xfffffffffffffffc, 0x2, {0x1, 0x1, 0x6, 0x3, 0x5}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 06:49:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:38 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000100)=""/94) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x247}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r1, &(0x7f0000000240)=0x4) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x2) 06:49:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x600000000000000}) 06:49:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xc8030000, 0x8080fffffffe) 06:49:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff8, 0x4357, 0x6, 0xe6, 0x4f3b}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x100000000}, &(0x7f00000001c0)=0x8) dup2(r0, r2) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000300)={r5, 0xfffffffffffffff9}, &(0x7f0000000340)=0x8) 06:49:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff01, 0x20000) fsetxattr(r0, &(0x7f00000001c0)=@random={'trusted.', 'cgroup\x00'}, &(0x7f0000000200)='loposix_acl_access\x00', 0x13, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x10841, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x900, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r3, 0x7, &(0x7f0000000080)={0x4, 0x8}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000140)={0x0, 0x1000, 0x7, &(0x7f0000000100)=0x2}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff89d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8001, 0x0) 06:49:38 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat(r0, &(0x7f0000000140)='./file0\x00', 0x808002, 0x1) 06:49:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0x800000000000000}) 06:49:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r2, &(0x7f0000003280)="2873d82f9ea007a2fb892736678edd3a163312194ed800ea208d872747c47cfb87f9cc6d91b389a0348813ba12e48f505d5f6b39853368f05df0165157dfee5020749ca72cda66a327e0bd9aa06abf62b3130cd033b57901b768854ac84857779e39d957f9fc274b9fdeb3fe9ac9c4e24e33f2a16f658fe629f4676139bae7f721da4c35ba9c08b41b879da0b6c6a5726fa1fa083d554e35d4b95a3266d39460ae5e7c29541366f52c11dc7e26ad63dd93fa57d92e419ac07606dbedf8fc283143e0767e1a9da9ca4551909cbbace802902e99d793b6a21aed11e69d6cb4022a5827a825a48165bcedfa203e9725177ec6004307a575ea478ed845e3b2c1a79a65dbeaff1b6ef4fe89cbc7a42305fb113bdcf6afd0b126828b3dbf886b38af0aa605b6ccbd4b4491ca8df9e7d1f2a42b3b4ec73695aad844e3eb5dd2b0ae4219398404a354519406ede0564fbedee343838a5dc016b6e301d94005417c35e7482d41055c8187d72e792c337cd4ba240ffabf31b81be6b5a06fbd9ba0606e6d8cdfb7251ecd0410e50db4d05abc16b6e35788cb3df79083d5cd1a12aaeec7e2081b113bbc878356951eaed7e653ef3f4703ecbf65d21eeaa8cbe09e84f6323ea959648e10d40c6478ce4386433d8a6b18ec382ee91da5e253959a69ee178239e5bd84e08e86cb33850b2aa2758f652b62d52fa7690c2d85e1a66ae587abf8ca4003b1e6f5c5b0b9bd4723efa607053f3901d7ce1c14d5a554b5ea6cb928fa8263e6955b47544140975c96804d5cb021b77b0345ab4d938031d39c29f7989cceb7507b75055a5072f8ba60fb3750030b96b7449919b7e19e39fe20f1a92070520cb75cb9fc611e59df8a01776dcf5a70fe7c3f5a54348271f8bc01547b4151b5ac09c72cc26ca486e9298277ad84f0becaeb4af0ab5135f46dd623052739aa67d658f42ff8185e34aab68ab4b314ae29951b27e16f7101850efea4f99f2eab66dd81dc43b962f96a89877fdf384ebb148cdc4c06fe7564f38d6d36a5c0fe25828df2386ee986265afeda333a20b4bcf4a986b78c1ee3d500083e655d094924c6d9c15159fc7c7322b1f283e90c350fd65e3b5b8a14365f702fc42311e7a23036831a7756e8babda0eba54587286511fd13917f6ceefdf75b2ea94333ed025fdb79df2428e92db3506e2cf4dbc11daf1b94b893821b7a459800d0ff43aef8f79d7171a244b588ace02804c5c415af1b828de8ad0b8aad88aa18d2a4da558b40a3ca3bb5bc21a8c3a0e41c4989e2a67f641703320c18a079143c85b5e8256de67df1fad1fdc26d44e869d58654285cc709f74ff0ed44fde63ce24d2c73c3061deeea60b5b546aefc5f0eeabccc31e8fcf757d7218463f64930fe3a3221ce5952bb619cb2955f9f179ad946222040a7bb47f443026ad303854901423d9061d7b509da15be76667a09fc2718ecde28e797c50fbac17314a23a6a1fb7154bb0f8886ccac581b72b1a661cee929108e03f74b82fc2c96b5e219ad83f734b674f720e4823bb4961748e9d1035850f349eaa9ff6ba97720df3ba317c67584bb8c3532dc1b0a9868d3517b294f7d9117c87bae8f01e864d211be4eb25fad273459e8948cb3303df24c0a54bb338319e4840bf588b2d009513717eed0f317e692344f45fccee1ffd7a9d97e693c737df1a48de59ab21aae7d8afad80c13b9dcd6c70d65812df3da2cad0bda52c675dc13ce80aa5269b1f3a033fd693345829a5471ab2166407dbea0f62299c8c58fa73973176b9e56841ecff8fad62200ffec429c97502032500c35bbed0a4306586323e34adbc09f7f220244765ca0b3e8c62ce45b68fc4afb3b2b1cd9ff2d7112de1379c30e515274968c3b1b57a5c5f66eda7093a192584f0a36e72ca569b5300947bc9c8e0c215284575180b6674f49b3a5c2933e79ae89beb69bf30e95b9e487c722390f1c8bb39bbcdb65502e819078302028209a93964877ac21eb29690462b79cfb2bfa73c63c70335a7477beabb4c169f2879152b19a6db9a9ae4fe0d440fe89032f257271dc941ae8b99466e40160343320b0cfc90d6dcb470cb2fdcd05661ef8b519dabe00da20e7eb69dc9d8cf64809e925106c324ffc85485aeb7e6115352a4609f05ecf7349944cf1cf06ffda6a3491632f9a4c6a2e8b41a489d00f995268be247ec8fd649b0e72c6c3a5dd6232c79aaa245da404c980b6be7f929ec18838b658b24bd9e6e7eff88eece680402bbff272e4525849be57f0ecc17c003a03c68d930bf5e37c68eb27112e2484497e69dcb650c166a830679e31b7eceb1f8d28fadf0960fb4d747e8178120ad033ee538322b33daf1d119674d8a54e4cd04ba2e9d70c528f61882a25d264ebf09f45a7f7bd6136b841956c30d77957713b61626619eb60f384484f4c7dc81f683ed23d48f7614fa72dec7081eea9c917949bea1f369e8583b2ab41ffb16f4ea375784a08a04cd475932eece68211023d829c0529cd7957eb564b62d20095547b2704ebf036695cc80d89653d08a4685fcf537dce17d7550687656e66b6d6a6b7f9ec2848e59a606551394cafc99bf2dd29f46c280dd7f222b40c4109f7006ca9aef6d660fcd00981a8be0e94100367874e48f6f32251348479f1ecbdce9cd153f6cff3183b9f69632e2d69915877844a2a7c3582c3bb2e8d08521a7e09cf7ae61545da349c182773abf28ae01e49f6fcb4d5a749c9ea28693c3acf1428bd73ed3542161689668e2d93db027e33bd3bdc4f1e983c5f1ee1fd1f90df1fe69a0c85ead9eb211ca5ee6f994e3cd7139ff12e74ca95d905c2c69fc5af8cf8b21ed1f9b228322296d2b060ad2bbfb4b74e6a7aadf93e8688e39758fd41caa1a7fc0389cee54d9f978712f63b371fb3c0999883a09986c8844152065c646d76ad4ce789109f1c7b3bd32e61c9853263ccc5cf5bc1c49a392306725bdf2dd6d99601a5dbf23a60ae67fa5d4a7daf7aa22f2c2ab2a39f5595d44674568377c50e6e8a3808ea6de3436d40dc7628f3d1fc5721059f887588e07cd6addc39f1c336f38b3f2ef45ed9d9879d3be54b77f4a94f81f8214ec781b41b83f81ff298e91b304a09e96f99380f83783219560db6df5e2c84017041480992f241a54ec1ff96b7a2170892afdffee48f76802ed77dba3f73c2f764f44ae67e91146fe7ab491d0af1f3845137f844e617593b787afdc9c8fdc1bbc0be7ab1841efcd6331207a043f59147b045f0ebe7cf9be8fe5982a21b0f7d3efb315b677af88aa74e8a739d8beff1d765ede28e29d3e87fe2cce65c1076547c14fabe4319b166e11d0b84e3c31b7934c410900000078c058abc1458ea983f3867f7642e17cfe5a385e0718b3773a741c79f9f8c0f310e71dfe8a4cdb2c6da075c683c0b2ac25763eb976a88c2fdd8ff8bb0be7e7aed3bff0576918cd2e66859135076d7b189bfefe18c71ebb9bc2b972815288e842505a0de012d091e97c14832669c5a50c7fcbc1b32bb756c2f807ac1635973a8fc657fc2a853580e4bfc3184c822a3aa030c7ed249557789aa69e84d3f38d6fe9604c062628b676701eea86a0881b22f0e808576378f16774ceaf70de6d50428124c90b145804b5d8fd1e05648724ffad9bcbb79dd79694c27856818d662680d596813e57b51873d8d1e76a1fbc6e840e063ae2f6fb5a86af26006a4571d4525ca22140cccb03c322d96172e02a2663e1d507957456dcc54fe220e1db596fbb53ac620daa5a43214d00747eb5e5813cd51375ae63d6f521a9a5feaa668e367ee492410e92dfb375e8249aac415e9d184ed491b2cdc40278e78b26a9383feeed20ec43d8f6c2ea107d47edf367dab0cc4f87b8918931f8b8356a0bbb625b9f9ab3d4e25bffd3f029661bf08e05a53d64a46c89f6195ef46e33d6ae0805ea1ba30e5e857f6d6f2950971dba8afdee3445af6b607594b8dcba160fb5e419208153a6127e6932d16ed42fb4e6b4845e067f679b78b52b0dc37fd64886480364756cf7169eb82f787a8ed0f2efa5c53bcd0f921c94fbf3e986c8931017fbeaa30ad0faa2bec191d398e962cae30c52f08a16422a06526146d0431d375465d1efe9a25c9f64ed2e9e778cbc23d1d3f791d01f43fd214ab5e33202216a76d25cddc71f7a5d12a27dc898fc87f1664e554bbfd29452a312c6e11ce42c7b71dc6a1605fd910f2c3c731353acfcda12a61f7b216bec7b25a1df0e75614af26366ec609aa4dc37a4b71cd60c2526d5dfd23f220d4bbf29129bd1a85f1f07f613ab9aed8cec38635de05f322b23d4b968e30f7266333f0c5d9d478b2ac51251903bdd85d6779509784087644ac6372b93dc4ddec68dd272d43294ea2730cc3761fdea1b989546be98a33a608da83e9a60d3cb2d9f169dbe04c24d87f115346e76c29852abb670df22bb24aa5ff6e77d96b78406c6fbb803f9223a833a0cb7123ac179a3330b3a0b351aaa65fca8403b3cb9edf5ef963d275701c4c4323a0512a55f391d12a6b6c53c79ffce570ad409d5968eca62d625b540099ed74f4722885babc0299e1b75b5936fdecaa43fbd8eee5207907ae6d399a5a09350d9a38f1cbbeeff8f3674184e89cffc2330c362be70194b6e9c70b852e5088d12f7b5ca2580466076a1f2de0137a47b841d4744a2a355093805dbc0c9162ba562ab12affa63a023fe60862082e55360319ba70c0045f8158e5126fe4e9b0171801d7f3043e7f537ed787961b5cdd30585138e4cbcc666a2277f3c02cfb5b2012fcec17eeda266bde6d1ad75223e713177d78932eef973b0cd985a21d054b774006475069c62afd705596d0e376c2cf3a8576ac19dc6bf2080239aa7b3c060286de5d3f1c783401d6362e6addce0867a3f53032cf4b86a9b072da5c24ac030628596ea1aeb05bf3a999b5c78e477d2dc36c1b2120695ae9c4a3fe0457b07f4b6af0dc27612f4c041f032d6863786d33f0bdd96c760efb37fcfaf797239983eb32e26522ed991ccf7138d17cecaf462d0260e7fa63173d592204935458213fe8697694ac3b67f0d6c0f3696ebec068a3ff90fa7ecc1a0831b44694c024523c562d693e69970663258b0322e5da305b8d87da643550f152618453938a274519f7b64a51b84606860532e13b8a060b015e42c53a27be6d1b2d9231a10bad2c085fc5b3ceadac329d6f887442d649911db1cbec79ca19979b08e9d932cdfe26901171ad923a1229bb1dab81569583f56fbc0b615236d529a4f6dbd7900a5b19f2d0d6b558771a2b750bd46bd9e84e506e5dac17c7d68b1a289c5019554607206b255174379c44dc70f51d0567aeb7b95b25ab2584efdb3cbe1b6308770fedd394b987245e3a96cc029d09276653eafb2970c0a39fa5c036f209759e9b3cd0ed39339206d310702dd34ff303bbeebd8f1f2c92ad627d8b208869de6f6092f908d99da189c9ec3a8af9f1251b8819a8b1520e99399f5a50a89b2a0f421ea8042ac93cad0337069d5050000000000000019cc2499abe9bd28b57299590ad481b68b55778f3e029cde87f4b039aa3a92a02620b6980348ea20bb3f644aae437cff9b825c393ef7df888fb09d0717f5e1adb66e862aa926e068883dd85af518380ef1582b8e78941010b958353f6aef23e322d0a5e5f488756a15681e55a1df6ed89d7ae63f37821aca607a8f1e6ea38bcc9ff95bad8104178b0ce78f746afd2eacdbbe203f864a1581f3e9451817344ddf64b38beb7571d861d75c30fe3839afffdf151da3f553e661c2aaba32b6629744e0b0c9fad27f379cb07a7e3f108139f3cca8a1d6ed4d39e36fa03c352281cff0f5c08887362ac43d61a3391a86ad80b66689f6497e9db8505213f097790be782b87300027d9307f5afa7f6d640ba69324c32d22b462e8648c9dc6cec129678e923d6847e31f37be2c2927c4f4f25c2e3681e2ce1cfcf4b9f410eef628305787fb4b939addbd91b947aef17224b4e86f4cdb61334d12326b23ce6a0a4dec33d85a89c753662f39cafd061a7be19bce5ec0d721fe072e7138fb294a3ee9cbc1eb6e5bad69a215d0588eb88ab4f8617d59df636c70c7396cdffac024ad4bafcfdcfa5265bf925ea0005ae287afd41bc5a7a01fb3fea9b58cfbfdd2bc2e6260ada6e", 0xfffffffffffffe13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r3) [ 322.890787][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 322.890802][ T26] audit: type=1804 audit(1554360578.430:269): pid=408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/293/file0/file0" dev="sda1" ino=17460 res=1 06:49:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x10280, 0x0) accept4$netrom(r3, &(0x7f0000000240)={{0x3, @null}, [@remote, @remote, @null, @remote, @null, @netrom, @netrom, @null]}, &(0x7f00000002c0)=0x48, 0x800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r5, 0xf00, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x800) dup2(r0, r4) 06:49:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xcca8a55c, 0x8080fffffffe) 06:49:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x200001, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000280)="b7660b57ef18ebca73255b95171cd15813269827f517e26db71b01a5cae328c4850ebf87d3e82da9d1eec94ef7210c9ec7acf599b12d8cf5978b99648d56b91de69eebfe00712e5f8a294614bb67f883016aed04d759244fa55ab624c19b88ea6572651783f9b488d85c88edc9d63dcc0efff47760c81efb54e1540fb5942f1d79ca249c0f0d945cc2becc1c15c7fc22d88f187dca6ccfa5c1d924bf0d49dacc3b4967ee8597f53d13846560ae4e30831b207d48384887089023f9157d71b7105d757cce9827109d9d688a9dca5ed7a111e005b10c9ea94d10c8180141733d159b289b", 0xe3) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x40) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x52, &(0x7f0000000100)="28614aadb55b38572e9282ccf89ac5fe65ad4fe8d709d4305bc8ae3538dbc217adce9d2e6c18e30681072e696eb81d4222e1ebb210fe03dfb0ddf75ddc0dc4a9550a8e6ba3d72e0d8c0884f1bf257974842e"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) creat(&(0x7f0000000200)='./file1\x00', 0x0) 06:49:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff, 0xfdfdffff00000000}) [ 323.015170][ T26] audit: type=1804 audit(1554360578.430:270): pid=408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/293/file0/file0" dev="sda1" ino=17460 res=1 06:49:38 executing program 0: clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 06:49:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0xffdd, 0xa0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={r3, 0x1f}, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2eccec31}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x39}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9b9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x800000000000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x110}}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r5) [ 323.227229][ T26] audit: type=1804 audit(1554360578.770:271): pid=842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/294/file0/file0" dev="loop1" ino=79 res=1 06:49:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 06:49:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getgroups(0x8, &(0x7f0000000040)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0]) setfsgid(r1) open$dir(&(0x7f0000000140)='./file0\x00', 0x20000, 0x125) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0xfffffffffffffffe, 0x1000, 0x8, 0xfffffffffffffffe, 0xfffffffffffff000}, 0x14) socket$rds(0x15, 0x5, 0x0) 06:49:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xd0040000, 0x8080fffffffe) 06:49:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20400, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 323.353559][ T26] audit: type=1804 audit(1554360578.770:272): pid=989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/294/file0/file0" dev="loop1" ino=79 res=1 06:49:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x8000) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0x1, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x101, 0x800, 0xc4}) r4 = dup2(r0, r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0xbe3, 0x0, 0x800}, {0xbbc, 0x0, 0x9}, {0x305, 0x0, 0x7}]}) 06:49:39 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7f9, 0x3, 0x1, 0xff, 0x2, [{0x1c, 0x400, 0x879, 0x0, 0x0, 0x3182}, {0x8, 0x81, 0xffffffff, 0x0, 0x0, 0x8}]}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) [ 323.537978][ T26] audit: type=1804 audit(1554360579.080:273): pid=1247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/295/file0/file0" dev="sda1" ino=16965 res=1 06:49:39 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x280401) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000040)) dup2(r0, r2) 06:49:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf0ffffff, 0x8080fffffffe) 06:49:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x3, r1, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x7, 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)) mq_notify(r2, &(0x7f00000004c0)={0x0, 0x3, 0x0, @thr={&(0x7f0000000400), &(0x7f0000000440)="13151dd9d264cf47f11b1e1e41c3cde15bc44f29b5f9e392952805e056d6c7c783783362c0d8a7173506a4fe6dc8cb7c3cf0966c09b1953dc69f3ce7b3515ae5e52da1343538053c6045902c11290c4863bc814c7da91c01957e825b26ea2b878d4a87d9cb3d"}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x80, @tick=0x7f, 0x4c, {0x8, 0x6}, 0x4, 0x1, 0x1}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000340)={0x1f, 0x10, 0x5, 0x6, 0x7, 0x2, 0x3, 0x149, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1010040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x700, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) [ 323.685810][ T26] audit: type=1804 audit(1554360579.080:274): pid=1247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/295/file0/file0" dev="sda1" ino=16965 res=1 06:49:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3, @mcast2}], 0x1c) clone(0x4000002102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x9) dup2(r0, r2) 06:49:39 executing program 3: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000600)=""/4096, 0x1000) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x1fff, 0x0) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x88b5}, @val={0x0, 0x87, 0x3f, 0x0, 0x7f, 0x7}, @ipv6={0x0, 0x6, '\vc\'', 0x397, 0x73, 0x5, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@srh={0x5c, 0x4, 0x4, 0x2, 0x6, 0x10, 0x6, [@dev={0xfe, 0x80, [], 0x10}, @ipv4={[], [], @rand_addr=0x392}]}, @routing={0x7e, 0x0, 0x3, 0x1000}, @dstopts={0x0, 0x23, [], [@generic={0x1ff, 0x6d, "4b48055e8cbc1ee7b8d085ef2d6102ece17859560228de521937924ec40dc30b892a72713bf8cc5c5c8f49f04a6e87938600b8a7312e99d39484946c775749ee76ad5dac88fe0f0e2398555e93c01c9e29ede765ec73204bdfe4de6914c4fcff5696522c19b53513aabffafdb2"}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x5}, @generic={0x2, 0x7a, "a47a6b3b1f468ac0dc1c343a4297699a8df04e7e1bb8a7992b5be51c8babc261d32e5f56d147918a0f02db67fe18ced9d0e2b28ed0698a70812be44c0ab1c947447b81891c1901cfe9fb549f985236563bd8b3bfe1688ebdea2cf4c244174a0e35f5b5de04967867beda9cb565c77f0b66064d0adacdf71ad4d8"}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x7f}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x2f, 0x10, 0x4, 0x8, 0x1, 0x8, 0x101, [@loopback, @rand_addr="2c0701858efb396ef792621f46ca786d", @ipv4={[], [], @remote}, @loopback, @mcast1, @ipv4={[], [], @empty}, @rand_addr="d8399cd9075a6cbce3ca61e7e7584a74", @dev={0xfe, 0x80, [], 0x14}]}, @routing={0x2f, 0xe, 0x2, 0x4, 0x0, [@loopback, @local, @remote, @ipv4={[], [], @local}, @ipv4={[], [], @loopback}, @rand_addr="48fe2a50ee6c271e7e3b9391c9bec786", @dev={0xfe, 0x80, [], 0xe}]}], @udp={0x4e23, 0x4e22, 0x13f, 0x0, [@guehdr={0x2, 0x6, 0x2d4f, 0x40, 0x100, [0x80]}, @guehdr={0x1, 0x6, 0x5, 0x0, 0x100}, @guehdr={0x1, 0xbc37, 0x800, 0x19, 0x100}, @guehdr={0x2, 0x2, 0x7, 0x6, 0x100, [0x80]}, @guehdr={0x2, 0x8, 0x6, 0x0, 0x0, [0x80]}, @guehdr={0x1, 0xffffffffffffff01, 0x20, 0x1, 0x100}, @guehdr={0x1, 0x1, 0x8001, 0x4, 0x100}, @guehdr={0x2, 0x5, 0x7fff, 0x0, 0x100, [0x80]}, @guehdr={0x1, 0x55c, 0x6, 0x7, 0x100}, @guehdr={0x1, 0x2, 0x56, 0x100, 0x100}], "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"}}}}, 0x3cd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:39 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0x6}}, {@common=@debug={'debug', 0x3d, 0x7ff80000000000}}, {@rq={'rq', 0x3d, 0xa995}}], [{@uid_eq={'uid', 0x3d, r0}}, {@appraise='appraise'}, {@smackfsroot={'smackfsroot', 0x3d, '+%'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x38, 0x73, 0xf4aeff74e8cfb277, 0x37, 0x7c, 0x77, 0x66], 0x2d, [0x7b, 0x36, 0x37, 0x65], 0x2d, [0x64, 0x7f, 0x3e], 0x2d, [0x37, 0x31, 0x37, 0x65], 0x2d, [0x77, 0x0, 0x37, 0x0, 0x35, 0x3f, 0x7f, 0x33]}}}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) 06:49:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x200, 0x8000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000001c0)=0x100, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) [ 323.928564][ T26] audit: type=1804 audit(1554360579.470:275): pid=1726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/296/file0/file0" dev="sda1" ino=17483 res=1 06:49:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf4ffffff, 0x8080fffffffe) 06:49:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="e5f319a54f5fb56b0617bd32e5e41d04a4bfbda9b7f99d3f13549ba38e5667fed0420f1c3158c48a8264454569404c46ba7431bc1d8d9d09ba33d29591bd18c86a5ba9746c55def4952b32fa560a28f4199307091e9ebb470b303a07e3df123d8e3f2f38d0b75437d51d4602144aeae2f611b7e660563dc5284c5138f5fc641c8dd0e02ceaeda4e24f5318ef895cd8c59287ff70a472e29043e2278f17a166ea4e385ecc43cbdc1966cbb43190b2e857af37fb360b44f25e12cd7f4e52ff10950d570673b3575d1401b023e6b701e30e674aa284ff57866a0a1e7f445009e87e3ad3d2916dec93f328b759febfa0f780d7ce", 0xf2}, {&(0x7f0000000040)="d157d0c183c4f5", 0x7}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="f0000000000000001701000002000000d8000000dc48beb8fabf36d4ab1af18cb8fe1752b54442a2abd11c1b06ab15d88be742d1083fb16ac31fdf07d53004fb9171155af79e358f0337d2a755077f1a1cb535201dacf7d11984fc3b603b9e0567785047ec41a393bf5e0cd2931dabc90b9d40c8bace7a1d51506aed7a434b301211dfddf1c0687c2a8bb7e02c403898b86cce8a2577957343cf47eda53013b3bd30b1e9269276b3e6e1ce13a25ec1775104e247dc24d961066250f6c652bc6c898db3b242c075a6584c3961bbe66ccea4715ee85fcddf6876bea051b649b842bafb451b5d45e55badaa2b9900000000180000000000000017010000040000000000000100000000d3678ba7d2437ea27caa14bef863a7906e693f1a2dbeeb2646ebad3313f59e5d0160b65a1c253f99fd84b689bb46526db90ed9987ec94bb1dab62f16ddf2434002579baa46e0ed60ed2d6a753ac87215954b79ae75e1f839cc0fa93c9d46a9d9dc"], 0x108, 0x1}, 0x4800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033d, 0x40020000000209, 0x3}) 06:49:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800340, 0x28, 0x0, r1}) dup2(r0, r2) [ 324.056089][ T26] audit: type=1804 audit(1554360579.500:276): pid=1726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/296/file0/file0" dev="sda1" ino=17483 res=1 06:49:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x1, @empty}}, 0x246e, 0x6, 0x81, 0x400, 0x80}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={r4, 0x6, 0x20, 0x7ff, 0x9}, &(0x7f0000000240)=0x18) dup2(r0, r2) 06:49:39 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file1\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001140)=ANY=[@ANYRES32=r1, @ANYBLOB="d2000000040785542711248631c11f6c63e54cfde77f7457116261692ee946ed2a6ffae75db79645d1da8c0f6b19d610ae76e39bfdd6ad989bcc254188f0e07f8c07000000000000009ec889b75b5d78c0530a9316c218ca3cdc58be5e7347164b5841ac7c0014f7a1bc4c9fc7dc06a7cf8124bfe290bf0a5a5a4ac77722e1e05bacaf4cecdc7df0566e3c03e04cb033d08380c4d263011c6095b8b9e8261d4e88e58eda613e41e708b40454972f0a08cc1d8afed35f25a2d5e836a8a5e7193354b760359882bb2d3c096a43640e0b099c0000000000"], &(0x7f0000001240)=0xda) 06:49:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) flock(r1, 0xd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 324.270836][ T26] audit: type=1804 audit(1554360579.810:277): pid=2061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/297/file0/file0" dev="sda1" ino=17460 res=1 06:49:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xf5ffffff, 0x8080fffffffe) 06:49:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r2) [ 324.344507][ T26] audit: type=1804 audit(1554360579.810:278): pid=2061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/297/file0/file0" dev="sda1" ino=17460 res=1 06:49:39 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/ion\x00'}, {0x20, '+vmnet1'}, {0x20, '/dev/ion\x00'}, {0x20, 'nodevem1'}, {0x20, '/dev/ion\x00'}], 0xa, "2d06acf0fd26958184de72e000474304327dfd03198237ee2c"}, 0x53) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000009f83f61a7ab43a28cdd7225a2fcf912312b0956e5c7222c8793acd82b5c60f8e1c0a2ff1c38eb64f941fdd9319bbebad00d6baa8fcdaafe776e98cedba244eae7c432d60dd9445cd69e6e49664bbe8499aae9a1472e5f227bf6b420b7226fe0435fe38cb7df56068bc863e4fda3f5530d224", @ANYRES16=r1, @ANYBLOB="000327bd7000fddbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='TIPC\x00', 0x0) r2 = add_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="979a41f12b0d6ee35c3455bd62adf030ed28f734c6c82b316d4abc25aa295ae84da1b061fff483f634324dc13496e1c58e40d5d97c9e328b84ca362bc6ee3e282967dfe72a0bfc5e4f6432f0605006c87a1e372f991c", 0x56, 0xfffffffffffffffc) request_key(&(0x7f0000000640), &(0x7f0000000540)={'\x00\x00\f', 0x2, 0x4c00000000006874}, &(0x7f0000000600)='\x1aGU*\\\x95\x1a', r2) setfsgid(0x0) 06:49:40 executing program 0: clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff4, 0x5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 06:49:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000280)=""/7) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xbd3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180)={r5, 0xa0, "d84e467c0abdad563a8c5daf66f949f0d7284d28db05f8378ccf2a3a39ae701eda0e7de52afdfd68741e0fc265cc0e0ce3a4c60098835f5233d6b1480856fb885bebb035c58e308c7e0cdffa4aac1c9ea9de768e64a78728b4f92246e98ca427a3f3a4503d042da9251bdce9057e46c86c43ed5c35df5c207fc811fe93db93e3b5b4f4e8d75737e3f73bec31679d5f449c1a874f1d9004146478ee28c2b8e9a2"}, &(0x7f0000000100)=0xa8) 06:49:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfbffffff, 0x8080fffffffe) 06:49:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) dup2(r0, r2) 06:49:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x2, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x7) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000200)="9fa88c8fe7073370c499cbb2abd21a8317384606b50e0c792af5f933ba9c03285790003678a2373989037246a8a84002855f26aece9b896ad9735e4f4dc7e3f3cd650fbc224d181fb3c626e32ce849328f5b33dcec684652e520b3098b15e83e13013d97a2d0662b160b434e2e4ea667517d16fa300e27de6058c86427f4cc316bce53220793f5fa56aff9eebe7c835079c7f16e93117113fef701cd270a623b") 06:49:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x220000, 0x0) 06:49:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfeffffff, 0x8080fffffffe) 06:49:40 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x590, 0x3b0, 0x0, 0x0, 0x0, 0x278, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x5, &(0x7f0000000100), {[{{@ipv6={@empty, @remote, [0x0, 0xff, 0x0, 0xff0000ff], [0xff0000ff, 0xffffffff, 0xff, 0xffffffff], 'veth0_to_hsr\x00', 'rose0\x00', {0xff}, {0xff}, 0x2b, 0x6, 0x1, 0x1}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x1e, 0x6, 0x100, 0x4, 0x80c, 0x2, 0x18c}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x97a0}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@mcast1, @ipv6=@mcast2, @port=0x4e22, @port=0x4e20}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv4=@rand_addr=0x8, @gre_key=0x80000001, @icmp_id=0x67}}}, {{@ipv6={@mcast1, @mcast2, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'team0\x00', 'yam0\x00', {}, {0xff}, 0x2f, 0x8, 0x2, 0x6}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x20}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0xd}, 'rose0\x00'}}}, {{@ipv6={@loopback, @ipv4={[], [], @broadcast}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff], 'hwsim0\x00', 'nlmon0\x00', {}, {0xff}, 0xfb, 0x80000000, 0x2}, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@remote, @ipv6=@local, @port=0x4e24, @icmp_id=0x65}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r1, r2) 06:49:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x400081, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x40801) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x7f}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e20, 0xee, @rand_addr="b6a6ac5ac8dbfae0fb460e0456eaad05", 0xfffffffffffeffff}}, 0x7fff, 0x401}, 0x90) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000000)={0x8, 0x6, 0x9, 0x80000000, 0x3, 0x2}) 06:49:40 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20\x00', 0x200000, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000001680)='/dev/dmmidi#\x00', 0xd6c3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)={0x5, 0x10001, 0xf91, 0x0, 0x0, 0x1, 0xfffffffffffffffe, [], 0x0, r0}, 0x3c) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e80200000000000000000000000000000801000000000000500200005002000050020000500200005002000003000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB="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"], 0x348) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) write$FUSE_IOCTL(r2, &(0x7f00000004c0)={0x20, 0x0, 0x1, {0x20, 0x4, 0x7fff, 0x2}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r0, 0xc0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x8, 0x0, 0x0, 0x0, &(0x7f0000001940)={0xfb, 0x5}, 0x0, 0x0, &(0x7f0000001980)={0x57f5316b, 0x5211, 0x9, 0xfff}, &(0x7f00000019c0)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=0x6}}, 0x10) fsetxattr$security_evm(r1, &(0x7f0000000500)='security.evm\x00', &(0x7f0000000540)=@ng={0x4, 0xd, "62ba2a360a"}, 0x7, 0x3) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001700)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000001800)=0xe8) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000001b40)={0x2f, @broadcast, 0x4e23, 0x4, 'dh\x00', 0x10, 0x10000, 0x16}, 0x2c) syz_open_dev$mice(&(0x7f0000001b80)='/dev/input/mice\x00', 0x0, 0x8200) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000010000000000000006000000000901000000001f81000400000001c129063f000000181b0000", @ANYRES32=r2, @ANYBLOB="0000000000000000030203009b0000001800000001f8ffff00000000d4000000e6f59acc001000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000640)=""/4096, 0x41000, 0x1, [], r3, 0xf, r2, 0x8, &(0x7f0000001840)={0x5, 0x80000001}, 0x8, 0x10, &(0x7f0000001880)={0x4, 0xede, 0xc672, 0x7}, 0x10}, 0x70) 06:49:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xff0f0000, 0x8080fffffffe) 06:49:40 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xfd8, 0x9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x802, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xaaa6, 0x9}, &(0x7f0000000140)=0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\n\x00L\xff\xff\xff\xc3`\x04\x00'}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x100, 0xd74, 0x2, 0x9952, 0x16, 0x2, 0x3, 0x3, 0x10000, 0x4}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)) socket$kcm(0x29, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) openat(0xffffffffffffffff, 0x0, 0x4000, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r5) socket$isdn_base(0x22, 0x3, 0x0) 06:49:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0x7, 0xb15, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x800, 0x7, 0x2, 0x9, 0x0, 0x7, 0x101, 0x7fffffff, 0xfffffffffffffc00, 0x5, 0x800000008000000]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={r4, 0x1}, &(0x7f0000000100)=0x8) 06:49:40 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x4c00, 0xfff, &(0x7f0000000200)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r2, r2) 06:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x100000000, 0x136a, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() setgroups(0x2, &(0x7f0000000100)=[r1, r2]) setfsgid(0x0) 06:49:41 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0xfffffffe) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0xed, 0xfb, "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"}) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/58) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000540)={0x7, @capture={0x1000, 0x1, {0x206, 0x5}, 0x3ff, 0x10}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x202, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 06:49:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfffffff0, 0x8080fffffffe) [ 325.545556][ C0] net_ratelimit: 22 callbacks suppressed [ 325.545564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 325.557179][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x40000) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000100)=0x6) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x8000800) dup2(r0, r1) 06:49:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) setfsgid(r1) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:41 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x6) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfffffff4, 0x8080fffffffe) 06:49:41 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x184, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1, 0x0, [], 0x0, r0, 0x0, 0xffffffffffffffff}, 0x3c) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setsig(r2, 0xa, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x1000, 0x3930}}, 0x28) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) [ 325.865937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 325.872079][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:41 executing program 2: keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) 06:49:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0x1000, 0x7, 0x8, 0x7fff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/193, 0xc1}, 0x10000) sendmsg$xdp(r1, &(0x7f0000002380)={&(0x7f0000000300)={0x2c, 0x5, r3, 0x16}, 0x10, &(0x7f0000002340)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="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", 0x1000}], 0x2}, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 06:49:41 executing program 0: clone(0x681fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0xc0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) openat(r0, &(0x7f0000000140)='./file0\x00', 0x1ff, 0x2) 06:49:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x180) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80033d, 0x40020000000209, 0x1, r1}) r3 = dup2(r0, r2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000000c0)=""/56, &(0x7f0000000100)=0x38) 06:49:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) fstat(r0, &(0x7f0000000940)) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) sendmsg$rds(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000500)=""/77, 0x4d}], 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000140100000c0000000500000000000000580000000000000014010000070000000800000000100000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="0500000000000000"], @ANYBLOB="0300000000000000e175000000000000030000000000000002000000000000000800000000000000ffffffff000000001800000000000000140100000c0000000900000000000000180000000000000014010000020000000200000000010000a4a421de2a8b376c2000704492539f277058818fc0fac6b0951da50dd196f6b64497b2216b4ddda833557fe305defd0faa718a2df5ca2ed3a8ca0f8da19d28fe3888255cb86da610158596c6106c48f1a67baa23c687b0c330477c62f04e47a3394949c3fd1591e71523e11d1eaae9f7c310e9d2755a8ee587e1255d370e5f8f2bcc5d5d6eb83268dad4a0"], 0xa0}, 0x20000000) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x4}, &(0x7f0000000700)=0x8) truncate(&(0x7f00000007c0)='./file0\x00', 0x99a) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000740)={r2, 0x6}, 0x8) setfsgid(0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000a80)={0x34, 0x0, &(0x7f00000009c0)}) 06:49:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfffffff5, 0x8080fffffffe) 06:49:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/42) 06:49:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r2, r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={{0xffffffffffff7fff, 0x0, 0x2, 0x8, 0x6, 0x80}, 0x3}) 06:49:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x20000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x19, 0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) chdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') dup2(r0, r1) 06:49:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) open$dir(&(0x7f0000000000)='./file0\x00', 0x90002, 0x158) [ 326.585529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 326.591362][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:49:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfffffffb, 0x8080fffffffe) 06:49:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x7, 0x2, 0x3, 0x101, 0x8, 0x1d}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x20200) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001200)=0x14) recvfrom$packet(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x40010001, &(0x7f0000001240)={0x11, 0x16, r2, 0x1, 0x4, 0x6, @dev={[], 0x24}}, 0x14) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x18000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x111000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0xfff, 0x21, 0x1, r3}) dup2(r0, r4) 06:49:42 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x2, 0x24000) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000200)=""/218, 0xda) clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x7, 0x80, &(0x7f0000ffd000/0x1000)=nil, 0x80}) r2 = getpgrp(0x0) migrate_pages(r2, 0x80000001, &(0x7f0000000140)=0x72, &(0x7f0000000180)=0x4) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 06:49:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000040)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) dup2(r0, r3) 06:49:42 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x10800) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x181, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x40020000000209, 0x0, r1}) [ 326.745551][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 326.751435][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) 06:49:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) flistxattr(r2, &(0x7f0000000040)=""/34, 0x22) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) 06:49:42 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = msgget(0x3, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000640)=0x0) r6 = fcntl$getown(0xffffffffffffff9c, 0x9) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x7f, r1, r2, r3, r4, 0xe, 0x4}, 0x6, 0x3f, 0xbc, 0x5, 0x101, 0x1, r5, r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000280)={{0x2, 0x7, 0x8, 0x4a55, '\x00\x00\x00\x00\x00\x00\x00 \x00', 0x5}, 0x4, 0x0, 0xfffffffffffffffe, r8, 0x0, 0x0, 'syz\x82\xaa\xf4i\x904\x00\xc9\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\xec5\x185\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xf2\xba\xd3\x00', &(0x7f00000003c0), 0x0, [], [0xffb, 0x3, 0x5, 0x9]}) 06:49:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xfffffffe, 0x8080fffffffe) 06:49:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000000)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001300)='/dev/dsp\x00', 0x400100, 0x0) sendto$inet(r5, &(0x7f0000001340)="e4ba73dcdda3cd8cb20e0f0f01b639a3a6b488368940d7281d9cf5ee9d820ccd1df1f57f921058683a8f314ebd7365ae7b3c1ce3a6256752d516", 0x3a, 0x800, &(0x7f0000001380)={0x2, 0x4e22, @remote}, 0x10) r6 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x100) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dsp\x00', 0x800, 0x0) io_submit(r4, 0x3, &(0x7f00000012c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, r2, &(0x7f0000000180)="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", 0x1000, 0x2, 0x0, 0x1, r6}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x3, 0x100, r1, &(0x7f0000001180)="46e4b266", 0x4, 0x64c, 0x0, 0x0, r7}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x5, 0x7ff, r3, &(0x7f0000001240)="77ff475da49b219f548c53050ee7295e", 0x10, 0x1, 0x0, 0x0, r1}]) io_destroy(r4) 06:49:42 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000200)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x3fff8, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40440) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) dup2(r1, r3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 327.226986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 327.232793][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:49:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x7ff, 0x1, 0x1, r2}) 06:49:42 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) futex(&(0x7f00000000c0)=0x2, 0x81, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x28, &(0x7f0000000180)}, 0x10) 06:49:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0xffffffff000, 0x8080fffffffe) 06:49:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x54}, &(0x7f0000000100)=0x8) 06:49:42 executing program 2: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x80800) 06:49:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) accept$ax25(r1, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @null, @bcast, @netrom, @rose, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x101, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setfsgid(0x0) 06:49:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x8020000000}) sendfile(r1, r1, &(0x7f0000000000)=0x1000000000000, 0x8080fffffffe) 06:49:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0xb3}, 0x4) socket(0xa, 0x4, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80033d, 0x40020000000209}) 06:49:43 executing program 0: clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xff7, 0x0) r0 = msgget(0x1, 0x210) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/67) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0xff, 0xc100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x3f}}}, &(0x7f0000000480)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r2, 0x29, 0x0, 0xfffffffffffffff7}, &(0x7f0000000500)=0xfffffffffffffeeb) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r3, 0xa}, &(0x7f0000000300)=0x8) pipe(&(0x7f0000000340)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) write$P9_RWRITE(r4, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x7}, 0xb) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f00000000c0)=0x7ff, &(0x7f0000000100)=0x4) [ 327.914473][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 327.914488][ T26] audit: type=1804 audit(1554360583.450:298): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/308/file0/file0" dev="loop1" ino=84 res=1 [ 327.972753][ T26] audit: type=1804 audit(1554360583.510:299): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir877689452/syzkaller.mppzPT/308/file0/file0" dev="loop1" ino=84 res=1 [ 330.745621][ C1] net_ratelimit: 18 callbacks suppressed [ 330.751432][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 330.757954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 330.905602][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 330.911415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 331.385556][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 331.391491][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 331.465644][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 331.471597][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 331.785599][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 331.791467][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 335.945571][ C0] net_ratelimit: 22 callbacks suppressed [ 335.951294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 335.957108][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 336.265563][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 336.271437][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 336.985577][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.991560][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 337.145631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 337.151458][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 337.625619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 337.631458][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 341.145611][ C1] net_ratelimit: 18 callbacks suppressed [ 341.151344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 341.157166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 341.305607][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 341.311492][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 341.785590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 341.791550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 341.865638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 341.871549][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 342.185635][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 342.191693][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 346.345622][ C0] net_ratelimit: 22 callbacks suppressed [ 346.351774][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 346.357620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 346.665605][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 346.671946][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 347.385573][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.391646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 347.545609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 347.551678][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 348.025577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.031648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 351.545627][ C1] net_ratelimit: 18 callbacks suppressed [ 351.545633][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 351.557189][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 351.705589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 351.712072][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 352.185593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.191973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 352.265568][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.271405][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 352.585561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.591422][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 356.745601][ C0] net_ratelimit: 22 callbacks suppressed [ 356.751500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 356.757323][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 357.065544][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 357.071445][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 357.785562][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 357.791458][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 357.945629][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 357.951617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 358.425601][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.431977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 361.945674][ C1] net_ratelimit: 18 callbacks suppressed [ 361.951383][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 361.957449][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 362.105616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 362.111864][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 362.585828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 362.591815][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 362.665639][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 362.671710][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 362.985609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 362.991443][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 367.145614][ C0] net_ratelimit: 22 callbacks suppressed [ 367.145620][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 367.157356][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 367.465616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 367.471410][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 368.185587][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.191625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.345639][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 368.351574][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 368.826014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 368.832441][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 372.345591][ C1] net_ratelimit: 18 callbacks suppressed [ 372.351297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 372.357068][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 372.505637][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.511596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 372.985608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.991501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 373.065659][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.071595][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 373.385608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.391651][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 377.545593][ C0] net_ratelimit: 22 callbacks suppressed [ 377.551356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 377.557539][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 377.865576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 377.871724][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 378.585576][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 378.591608][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 378.745593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 378.751591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 379.225586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 379.231403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 382.745582][ C1] net_ratelimit: 18 callbacks suppressed [ 382.745593][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.757591][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 382.905585][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 382.911586][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 383.385657][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 383.391779][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 383.465654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 383.471485][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 383.785614][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 383.791499][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 387.945621][ C0] net_ratelimit: 22 callbacks suppressed [ 387.945628][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 387.957544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 388.265628][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 388.271519][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 388.985544][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.991559][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 389.145614][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 389.151422][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 389.625572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 389.631490][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 393.145564][ C1] net_ratelimit: 18 callbacks suppressed [ 393.145572][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 393.157338][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 393.305630][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.311612][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 393.785610][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.791656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 393.865596][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.871754][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 394.185634][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 394.191741][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 398.345612][ C0] net_ratelimit: 22 callbacks suppressed [ 398.351541][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 398.357455][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 398.665574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 398.671421][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 399.385559][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 399.391478][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 399.555576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 399.561378][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 400.025581][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 400.031433][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 403.545574][ C1] net_ratelimit: 18 callbacks suppressed [ 403.545581][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 403.557848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 403.705605][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.711585][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 404.185599][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.191960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 404.265608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.271502][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 404.585625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.591971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 408.745629][ C0] net_ratelimit: 22 callbacks suppressed [ 408.745635][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 408.757459][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 409.065589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 409.071636][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 409.785597][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 409.791603][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 409.945612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 409.951445][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 410.425578][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 410.431447][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.945587][ C1] net_ratelimit: 18 callbacks suppressed [ 413.951425][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.957825][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 414.105590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.111684][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 414.585583][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.591564][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 414.665673][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.671655][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 414.985642][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.991684][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 419.145565][ C0] net_ratelimit: 22 callbacks suppressed [ 419.151611][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 419.157427][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 419.465593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 419.471557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 420.185569][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.191734][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 420.345613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 420.351432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 420.825589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 420.831649][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 424.345562][ C1] net_ratelimit: 18 callbacks suppressed [ 424.351467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.357407][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 424.516412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.522281][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 424.985602][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.991559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 425.065600][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 425.071636][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 425.385601][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 425.391597][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 429.545613][ C0] net_ratelimit: 22 callbacks suppressed [ 429.551378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 429.557253][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 429.865616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 429.871460][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 430.585548][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.591519][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 430.745620][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 430.751602][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 431.225609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 431.231403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.746259][ C1] net_ratelimit: 18 callbacks suppressed [ 434.746268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.758099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.905617][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.911642][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 435.385592][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 435.391867][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 435.465590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 435.471530][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 435.785552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 435.792368][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.945588][ C0] net_ratelimit: 22 callbacks suppressed [ 439.945595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.957243][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 440.265619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 440.271552][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 440.985592][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.991539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 441.145627][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 441.151603][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 441.625571][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 441.632867][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.145603][ C1] net_ratelimit: 18 callbacks suppressed [ 445.151373][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.157284][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.305618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.311585][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.785602][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.791596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.865631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.871557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 446.185633][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 446.191888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.345623][ C0] net_ratelimit: 22 callbacks suppressed [ 450.351353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.357176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.665620][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.671663][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 451.385552][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.391347][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 451.545646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 451.551635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 452.025661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 452.031618][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 455.545664][ C1] net_ratelimit: 18 callbacks suppressed [ 455.551534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.557335][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.705611][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.711604][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 456.185740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 456.191605][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 456.265588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 456.271590][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 456.585619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 456.591687][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 460.745657][ C0] net_ratelimit: 22 callbacks suppressed [ 460.751673][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 460.757480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 461.065698][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 461.071812][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 461.785605][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.791570][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 461.945581][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 461.951446][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 462.425564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 462.431417][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 465.945596][ C1] net_ratelimit: 18 callbacks suppressed [ 465.951707][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.957831][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 466.105626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 466.111659][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 466.585566][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 466.591934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 466.665642][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 466.671586][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 466.985622][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 466.991592][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 471.145569][ C0] net_ratelimit: 22 callbacks suppressed [ 471.151374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.157173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 471.465608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.471578][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 472.185565][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 472.191377][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 472.345630][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 472.356165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 472.825586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 472.831612][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 476.345574][ C1] net_ratelimit: 18 callbacks suppressed [ 476.345582][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 476.357228][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 476.505567][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 476.511445][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 476.985556][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 476.991681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 477.065643][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 477.071697][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 477.385578][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 477.391627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 481.545592][ C0] net_ratelimit: 22 callbacks suppressed [ 481.551472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 481.557428][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 481.865616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 481.872088][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 482.585560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 482.591845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 482.745686][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 482.751778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 483.225612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 483.231438][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 483.385807][ T1041] INFO: task syz-executor.5:5312 blocked for more than 143 seconds. [ 483.394242][ T1041] Not tainted 5.1.0-rc3+ #50 [ 483.399737][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.408580][ T1041] syz-executor.5 D27400 5312 7666 0x00000004 [ 483.414935][ T1041] Call Trace: [ 483.418330][ T1041] __schedule+0x817/0x1cc0 [ 483.422846][ T1041] ? trace_hardirqs_off+0x62/0x220 [ 483.428021][ T1041] ? kasan_check_read+0x11/0x20 [ 483.433070][ T1041] ? __sched_text_start+0x8/0x8 [ 483.438043][ T1041] ? __lock_acquire+0x548/0x3fb0 [ 483.443000][ T1041] schedule+0x92/0x180 [ 483.447125][ T1041] schedule_timeout+0x8ca/0xfd0 [ 483.451982][ T1041] ? wait_for_completion+0x294/0x440 [ 483.457361][ T1041] ? find_held_lock+0x35/0x130 [ 483.462218][ T1041] ? usleep_range+0x170/0x170 [ 483.466969][ T1041] ? kasan_check_write+0x14/0x20 [ 483.471911][ T1041] ? _raw_spin_unlock_irq+0x28/0x90 [ 483.477428][ T1041] ? wait_for_completion+0x294/0x440 [ 483.482935][ T1041] ? _raw_spin_unlock_irq+0x28/0x90 [ 483.488329][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 483.493769][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 483.498879][ T1041] ? kasan_check_read+0x11/0x20 [ 483.503834][ T1041] wait_for_completion+0x29c/0x440 [ 483.509291][ T1041] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 483.516009][ T1041] ? wake_up_q+0xf0/0xf0 [ 483.520252][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.526571][ T1041] ? kasan_check_read+0x11/0x20 [ 483.532049][ T1041] __x64_sys_io_destroy+0x373/0x420 [ 483.537914][ T1041] ? __x32_compat_sys_io_setup+0x410/0x410 [ 483.543830][ T1041] ? do_syscall_64+0x26/0x610 [ 483.548607][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 483.553951][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 483.559045][ T1041] do_syscall_64+0x103/0x610 [ 483.563638][ T1041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.569966][ T1041] RIP: 0033:0x4582b9 [ 483.573997][ T1041] Code: Bad RIP value. [ 483.578145][ T1041] RSP: 002b:00007fda4de6ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000cf [ 483.586768][ T1041] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004582b9 [ 483.595050][ T1041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fda4de4a000 [ 483.603203][ T1041] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 483.611351][ T1041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda4de6b6d4 [ 483.619397][ T1041] R13: 00000000004bf3f1 R14: 00000000004d1148 R15: 00000000ffffffff [ 483.627698][ T1041] [ 483.627698][ T1041] Showing all locks held in the system: [ 483.635523][ T1041] 1 lock held by khungtaskd/1041: [ 483.640561][ T1041] #0: 000000002ca88272 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 483.650256][ T1041] 1 lock held by rsyslogd/7523: [ 483.655153][ T1041] #0: 0000000041c8631f (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 483.663870][ T1041] 2 locks held by getty/7614: [ 483.668890][ T1041] #0: 00000000c50931f5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 483.677909][ T1041] #1: 0000000083187783 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 483.687651][ T1041] 2 locks held by getty/7615: [ 483.692373][ T1041] #0: 00000000a3ca73d8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 483.701495][ T1041] #1: 000000009de966c8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 483.711748][ T1041] 2 locks held by getty/7616: [ 483.716478][ T1041] #0: 00000000657bb492 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 483.725724][ T1041] #1: 00000000e2aa2e91 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 483.735351][ T1041] 2 locks held by getty/7617: [ 483.740102][ T1041] #0: 00000000cf24bd92 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 483.749122][ T1041] #1: 000000005550841e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 483.758867][ T1041] 2 locks held by getty/7618: [ 483.763546][ T1041] #0: 000000005b21504f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 483.772589][ T1041] #1: 00000000355c28f0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 483.782315][ T1041] 2 locks held by getty/7619: [ 483.787039][ T1041] #0: 000000008ea61982 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 483.796468][ T1041] #1: 000000004cef9e32 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 483.806517][ T1041] 2 locks held by getty/7620: [ 483.811245][ T1041] #0: 0000000059863f65 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 483.820377][ T1041] #1: 00000000facde4c3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 483.830191][ T1041] [ 483.832512][ T1041] ============================================= [ 483.832512][ T1041] [ 483.840975][ T1041] NMI backtrace for cpu 0 [ 483.845540][ T1041] CPU: 0 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc3+ #50 [ 483.853253][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.863308][ T1041] Call Trace: [ 483.866714][ T1041] dump_stack+0x172/0x1f0 [ 483.871205][ T1041] nmi_cpu_backtrace.cold+0x63/0xa4 [ 483.876610][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 483.882271][ T1041] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 483.888253][ T1041] arch_trigger_cpumask_backtrace+0x14/0x20 [ 483.894432][ T1041] watchdog+0x9b7/0xec0 [ 483.898652][ T1041] kthread+0x357/0x430 [ 483.902726][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 483.908254][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 483.914600][ T1041] ret_from_fork+0x3a/0x50 [ 483.919152][ T1041] Sending NMI from CPU 0 to CPUs 1: [ 483.924804][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x2/0x10 [ 483.925739][ T1041] Kernel panic - not syncing: hung_task: blocked tasks [ 483.939909][ T1041] CPU: 0 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc3+ #50 [ 483.947440][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.957476][ T1041] Call Trace: [ 483.960772][ T1041] dump_stack+0x172/0x1f0 [ 483.965149][ T1041] panic+0x2cb/0x65c [ 483.969114][ T1041] ? __warn_printk+0xf3/0xf3 [ 483.973807][ T1041] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 483.979586][ T1041] ? printk_safe_flush+0xf2/0x140 [ 483.985124][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.991634][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 483.997261][ T1041] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 484.003409][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 484.009892][ T1041] watchdog+0x9c8/0xec0 [ 484.014200][ T1041] kthread+0x357/0x430 [ 484.018277][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 484.023816][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 484.030270][ T1041] ret_from_fork+0x3a/0x50 [ 484.036056][ T1041] Kernel Offset: disabled [ 484.040417][ T1041] Rebooting in 86400 seconds..