[   65.532006][   T27] audit: type=1800 audit(1562807475.335:24): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2454 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   66.317062][   T27] audit: type=1800 audit(1562807476.185:25): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   66.358790][   T27] audit: type=1800 audit(1562807476.185:26): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts.
2019/07/11 01:11:24 fuzzer started
syzkaller login: [   77.623868][ T9166] as (9166) used greatest stack depth: 23416 bytes left
2019/07/11 01:11:28 dialing manager at 10.128.0.26:36823
2019/07/11 01:11:28 syscalls: 2465
2019/07/11 01:11:28 code coverage: enabled
2019/07/11 01:11:28 comparison tracing: enabled
2019/07/11 01:11:28 extra coverage: extra coverage is not supported by the kernel
2019/07/11 01:11:28 setuid sandbox: enabled
2019/07/11 01:11:28 namespace sandbox: enabled
2019/07/11 01:11:28 Android sandbox: /sys/fs/selinux/policy does not exist
2019/07/11 01:11:28 fault injection: enabled
2019/07/11 01:11:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/07/11 01:11:28 net packet injection: enabled
2019/07/11 01:11:28 net device setup: enabled
01:12:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockname(r1, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80)

[  131.040534][ T9173] IPVS: ftp: loaded support on port[0] = 21
01:12:21 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]})
mlockall(0x5)

[  131.181597][ T9173] chnl_net:caif_netlink_parms(): no params data found
[  131.276444][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.285005][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.293631][ T9173] device bridge_slave_0 entered promiscuous mode
[  131.302908][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.310426][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.318459][ T9173] device bridge_slave_1 entered promiscuous mode
[  131.334868][ T9176] IPVS: ftp: loaded support on port[0] = 21
[  131.352641][ T9173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.367479][ T9173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.420945][ T9173] team0: Port device team_slave_0 added
[  131.431005][ T9173] team0: Port device team_slave_1 added
01:12:21 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xf8})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070")
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
flistxattr(r2, &(0x7f0000000000)=""/42, 0x2a)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  131.542189][ T9173] device hsr_slave_0 entered promiscuous mode
[  131.579145][ T9173] device hsr_slave_1 entered promiscuous mode
[  131.662250][ T9176] chnl_net:caif_netlink_parms(): no params data found
[  131.693952][ T9178] IPVS: ftp: loaded support on port[0] = 21
[  131.723182][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.730437][ T9173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.738254][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.745404][ T9173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.759098][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.766437][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.778465][ T9176] device bridge_slave_0 entered promiscuous mode
01:12:21 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
r3 = getuid()
lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0)

[  131.820605][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.827797][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.843580][ T9176] device bridge_slave_1 entered promiscuous mode
[  131.922778][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.955721][ T9173] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.984094][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.011672][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.033130][   T22] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.052699][   T22] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.061695][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  132.079095][ T9173] 8021q: adding VLAN 0 to HW filter on device team0
[  132.112464][ T9176] team0: Port device team_slave_0 added
[  132.120181][ T9176] team0: Port device team_slave_1 added
[  132.175168][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  132.184567][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.191709][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.208225][ T9182] IPVS: ftp: loaded support on port[0] = 21
01:12:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

[  132.244786][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  132.253968][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.265146][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.272317][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.283890][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  132.351809][ T9176] device hsr_slave_0 entered promiscuous mode
[  132.391722][ T9176] device hsr_slave_1 entered promiscuous mode
[  132.441230][ T9176] debugfs: Directory 'hsr0' with parent '/' already present!
[  132.457457][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
01:12:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x0)

[  132.510269][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.525095][ T9187] IPVS: ftp: loaded support on port[0] = 21
[  132.533144][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.560174][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.569589][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.578285][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.587767][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.597009][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  132.606919][ T9178] chnl_net:caif_netlink_parms(): no params data found
[  132.666837][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.676968][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.700911][ T9173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  132.753906][ T9189] IPVS: ftp: loaded support on port[0] = 21
[  132.804403][ T9173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.852300][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.860264][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.868382][ T9178] device bridge_slave_0 entered promiscuous mode
[  132.877695][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.885309][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.893197][ T9178] device bridge_slave_1 entered promiscuous mode
[  133.000477][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.045708][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.076750][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.085224][ T9182] chnl_net:caif_netlink_parms(): no params data found
[  133.111392][ T9178] team0: Port device team_slave_0 added
[  133.126245][ T9176] 8021q: adding VLAN 0 to HW filter on device team0
[  133.177179][ T9187] chnl_net:caif_netlink_parms(): no params data found
[  133.215571][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.223495][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.233286][ T9178] team0: Port device team_slave_1 added
[  133.246839][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.257823][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.265862][ T9182] device bridge_slave_0 entered promiscuous mode
01:12:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockname(r1, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80)

[  133.303607][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.310958][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.321028][ T9182] device bridge_slave_1 entered promiscuous mode
[  133.339038][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  133.347858][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.369531][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.376638][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.385263][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  133.394201][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.402912][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.410039][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.417637][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  133.426428][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  133.434988][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
01:12:23 executing program 0:
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
creat(0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000300)={0xd, 0x14, 0xa, 0x6, 0x0, 0x9, 0x0, 0x7b})
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000380)={0x0, 0x2fc8, 0x9, 'queue1\x00', 0x9})
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r1, &(0x7f0000000000)=""/30, 0x1000001cd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

[  133.494262][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.505530][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.516847][ T9187] device bridge_slave_0 entered promiscuous mode
[  133.528422][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.537034][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.569949][ T9187] device bridge_slave_1 entered promiscuous mode
[  133.603526][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  133.613831][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  133.621557][    C0] hrtimer: interrupt took 52576 ns
[  133.691910][ T9178] device hsr_slave_0 entered promiscuous mode
[  133.749401][ T9178] device hsr_slave_1 entered promiscuous mode
[  133.788673][ T9178] debugfs: Directory 'hsr0' with parent '/' already present!
[  133.801694][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.826470][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  133.851490][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  133.869746][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  133.884819][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  133.894270][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  133.914188][ T9176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  133.926859][ T9176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  133.944486][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.970983][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.991717][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.030418][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  134.045433][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.076837][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.095209][ T9189] chnl_net:caif_netlink_parms(): no params data found
[  134.156439][ T9187] team0: Port device team_slave_0 added
01:12:24 executing program 0:
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
creat(0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000300)={0xd, 0x14, 0xa, 0x6, 0x0, 0x9, 0x0, 0x7b})
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000380)={0x0, 0x2fc8, 0x9, 'queue1\x00', 0x9})
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r1, &(0x7f0000000000)=""/30, 0x1000001cd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

[  134.226710][ T9187] team0: Port device team_slave_1 added
[  134.239595][ T9182] team0: Port device team_slave_0 added
[  134.344395][ T9182] team0: Port device team_slave_1 added
[  134.412223][ T9187] device hsr_slave_0 entered promiscuous mode
[  134.458960][ T9187] device hsr_slave_1 entered promiscuous mode
[  134.506192][ T9187] debugfs: Directory 'hsr0' with parent '/' already present!
[  134.577596][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.602931][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.621273][ T9189] device bridge_slave_0 entered promiscuous mode
01:12:24 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x28, 0x5}, 0x28)

[  134.693760][ T9182] device hsr_slave_0 entered promiscuous mode
[  134.713632][ T9222] fuse: Bad value for 'subtype'
[  134.732252][ T9223] fuse: Bad value for 'subtype'
01:12:24 executing program 1:
clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f34"], 0x2}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]})
write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffe01, 0x0, 0x0, {0x9}}, 0x133)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  134.750286][ T9182] device hsr_slave_1 entered promiscuous mode
[  134.788662][ T9182] debugfs: Directory 'hsr0' with parent '/' already present!
[  134.855925][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.876861][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.891058][ T9189] device bridge_slave_1 entered promiscuous mode
01:12:24 executing program 1:
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1000005)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$unix(0x1, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000480)=""/129, &(0x7f0000000040)=0x81)
gettid()
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51)
connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

[  134.930377][ T9178] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.059082][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.066988][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.090936][ T9178] 8021q: adding VLAN 0 to HW filter on device team0
[  135.114041][ T9189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.135008][ T9189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.148335][ T2837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
01:12:25 executing program 0:
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
creat(0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000300)={0xd, 0x14, 0xa, 0x6, 0x0, 0x9, 0x0, 0x7b})
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000380)={0x0, 0x2fc8, 0x9, 'queue1\x00', 0x9})
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r1, &(0x7f0000000000)=""/30, 0x1000001cd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

[  135.166382][ T2837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.187807][ T2837] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.194992][ T2837] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.231218][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  135.249332][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.274850][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.284124][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.291230][ T9180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.299721][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  135.308400][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  135.339911][ T9189] team0: Port device team_slave_0 added
[  135.354378][ T9189] team0: Port device team_slave_1 added
[  135.363125][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  135.372533][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  135.390011][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  135.409893][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.425089][ T9178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
01:12:25 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/37)

[  135.437271][ T9178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.501854][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.515215][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.524959][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  135.524973][   T27] audit: type=1326 audit(1562807545.395:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9239 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c60a code=0xffff0000
[  135.533111][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.571148][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.584740][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.605277][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.683325][ T9189] device hsr_slave_0 entered promiscuous mode
[  135.739076][ T9189] device hsr_slave_1 entered promiscuous mode
[  135.778998][ T9189] debugfs: Directory 'hsr0' with parent '/' already present!
[  135.788893][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  135.807759][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.824463][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.899573][ T9187] 8021q: adding VLAN 0 to HW filter on device team0
[  135.922838][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.934354][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.953762][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.962731][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.973151][ T9182] 8021q: adding VLAN 0 to HW filter on device team0
[  135.991340][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  136.010115][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.018470][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.025603][ T9231] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.034778][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.080280][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  136.090046][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.098703][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.105794][ T9231] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.113809][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.123474][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.132974][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  136.143300][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  136.151840][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  136.160906][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.169554][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.176644][ T9231] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.184958][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  136.193603][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.203772][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.210912][ T9231] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.266429][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  136.280288][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.288296][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  136.312810][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  136.321428][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  136.330254][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.339280][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.348104][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.356504][   T27] audit: type=1326 audit(1562807546.235:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9239 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c60a code=0xffff0000
[  136.357089][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  136.401622][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  136.420436][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  136.469975][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.480266][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  136.489945][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
01:12:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt(r2, 0x0, 0xc, 0x0, 0x0)

[  136.525178][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.539811][ T9189] 8021q: adding VLAN 0 to HW filter on device team0
[  136.551573][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  136.570043][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  136.581393][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  136.590776][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  136.606237][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.614781][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  136.630873][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.652086][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  136.671094][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  136.680358][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  136.689675][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.698172][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.705305][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.714714][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.729520][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  136.737396][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  136.747458][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.756378][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.763746][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.786613][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.821154][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.872146][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  136.881826][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  136.891073][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  136.903864][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  136.914402][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  136.923169][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.936824][ T9189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  136.949372][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  136.959648][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  136.967603][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  136.976159][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.020971][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.074426][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv0
01:12:27 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
r3 = getuid()
lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0)

01:12:27 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/37)

[  137.479204][   T27] audit: type=1326 audit(1562807547.355:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9286 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c60a code=0xffff0000
01:12:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x0)

01:12:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r5, 0x0)

01:12:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt(r2, 0x0, 0xc, 0x0, 0x0)

01:12:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x0)

01:12:27 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
r3 = getuid()
lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0)

01:12:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:28 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
r3 = getuid()
lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0)

01:12:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x0)

01:12:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100), 0x1c)
r2 = dup2(r1, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0xda522)
clone(0x400a308, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000), 0x4)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000140))

01:12:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r5, 0x0)

01:12:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r5, 0x0)

01:12:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:28 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
r3 = getuid()
lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0)

01:12:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x0)

01:12:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:29 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r5, 0x0)

01:12:29 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
r3 = getuid()
lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0)

01:12:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r5, 0x0)

01:12:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020411000200027001f8", 0x16}], 0x80, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="9c546990902300"], 0x7)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f0000001540)='./file0\x00', 0x0)

01:12:30 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:30 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:30 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
getuid()

01:12:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)

01:12:30 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020411000200027001f8", 0x16}], 0x80, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="9c546990902300"], 0x7)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f0000001540)='./file0\x00', 0x0)

01:12:30 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r5, 0x0)

01:12:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r5, 0x0)

01:12:31 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)

01:12:31 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)

01:12:31 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)
pipe(0x0)

01:12:31 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:31 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)

01:12:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz'}, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x7f, 0x7b})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

01:12:31 executing program 0:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000001540)="c0fca5055e0bd7ec7be070")
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f34"], 0x2}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3600009620fef3ff3305000000000000ae"]})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:12:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00')

01:12:32 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:32 executing program 2:
keyctl$join(0x1, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x1)
write$FUSE_INTERRUPT(r1, &(0x7f0000000480)={0x10, 0x0, 0x3}, 0x10)
write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x40000000000004d}], 0xfe72)
perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x40, 0x0, 0x80000001, 0x81, 0x0, 0x9, 0x8040, 0x2, 0xeb, 0x95, 0x400, 0x9ef, 0x40, 0xa5c6, 0x3ff, 0xccd9, 0x1, 0x3, 0x100000000, 0x2, 0x1, 0x81, 0x1f, 0x800, 0x3, 0x5, 0xe07, 0x7, 0x2, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x10001, 0xffffffff, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1f}, 0x800, 0x3b9e6d33, 0xc00000000000, 0x3, 0x1, 0x4}, 0x0, 0x5, r0, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="244acc90f3000000"], 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)

01:12:32 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x4000000040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1}, 0xfd07)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x100000000000003c)
fcntl$setstatus(r1, 0x4, 0x42802)

01:12:32 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)
syz_genetlink_get_family_id$tipc(0x0)

01:12:32 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

01:12:32 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:32 executing program 2:
keyctl$join(0x1, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x1)
write$FUSE_INTERRUPT(r1, &(0x7f0000000480)={0x10, 0x0, 0x3}, 0x10)
write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x40000000000004d}], 0xfe72)
perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x40, 0x0, 0x80000001, 0x81, 0x0, 0x9, 0x8040, 0x2, 0xeb, 0x95, 0x400, 0x9ef, 0x40, 0xa5c6, 0x3ff, 0xccd9, 0x1, 0x3, 0x100000000, 0x2, 0x1, 0x81, 0x1f, 0x800, 0x3, 0x5, 0xe07, 0x7, 0x2, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x10001, 0xffffffff, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1f}, 0x800, 0x3b9e6d33, 0xc00000000000, 0x3, 0x1, 0x4}, 0x0, 0x5, r0, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="244acc90f3000000"], 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)

01:12:33 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:33 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x313, 0x3})
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
pipe2(0x0, 0x800)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})

01:12:33 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x800000000000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3)
getsockname(r0, &(0x7f0000000300), &(0x7f00000001c0)=0x80)
fchdir(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00fdff"], 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000280)=0xfffffdfd)
unlink(&(0x7f0000000080)='./bus\x00')
timer_gettime(0x0, &(0x7f0000000100))
creat(&(0x7f0000000440)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
open_by_handle_at(r2, 0x0, 0xc00)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/9, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
clock_gettime(0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x8, 0x4}, {0x1, 0x40}, 0x2, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)

01:12:33 executing program 2:
keyctl$join(0x1, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x1)
write$FUSE_INTERRUPT(r1, &(0x7f0000000480)={0x10, 0x0, 0x3}, 0x10)
write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x40000000000004d}], 0xfe72)
perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x40, 0x0, 0x80000001, 0x81, 0x0, 0x9, 0x8040, 0x2, 0xeb, 0x95, 0x400, 0x9ef, 0x40, 0xa5c6, 0x3ff, 0xccd9, 0x1, 0x3, 0x100000000, 0x2, 0x1, 0x81, 0x1f, 0x800, 0x3, 0x5, 0xe07, 0x7, 0x2, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x10001, 0xffffffff, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1f}, 0x800, 0x3b9e6d33, 0xc00000000000, 0x3, 0x1, 0x4}, 0x0, 0x5, r0, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="244acc90f3000000"], 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)

01:12:33 executing program 4:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x0)

01:12:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x100)
preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x7f)

[  144.197329][ T9568] ------------[ cut here ]------------
[  144.213625][ T9568] jump label: negative count!
[  144.220286][ T9568] WARNING: CPU: 1 PID: 9568 at kernel/jump_label.c:235 static_key_slow_try_dec+0x1ab/0x1d0
[  144.230290][ T9568] Kernel panic - not syncing: panic_on_warn set ...
[  144.236911][ T9568] CPU: 1 PID: 9568 Comm: syz-executor.0 Not tainted 5.2.0-next-20190710 #35
[  144.245596][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  144.247015][ T3896] kobject: 'loop5' (0000000006322bc8): kobject_uevent_env
[  144.255659][ T9568] Call Trace:
[  144.255703][ T9568]  dump_stack+0x172/0x1f0
[  144.255723][ T9568]  ? static_key_slow_try_dec+0xd0/0x1d0
[  144.255740][ T9568]  panic+0x2dc/0x755
[  144.255756][ T9568]  ? add_taint.cold+0x16/0x16
[  144.255778][ T9568]  ? __kasan_check_read+0x11/0x20
[  144.255795][ T9568]  ? __warn.cold+0x5/0x4c
[  144.255815][ T9568]  ? static_key_slow_try_dec+0x1ab/0x1d0
[  144.255830][ T9568]  __warn.cold+0x20/0x4c
[  144.255853][ T9568]  ? vprintk_emit+0x1ea/0x700
[  144.255867][ T9568]  ? static_key_slow_try_dec+0x1ab/0x1d0
[  144.255882][ T9568]  report_bug+0x263/0x2b0
[  144.270377][ T3896] kobject: 'loop5' (0000000006322bc8): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  144.270714][ T9568]  do_error_trap+0x11b/0x200
[  144.270736][ T9568]  do_invalid_op+0x37/0x50
[  144.337865][ T9568]  ? static_key_slow_try_dec+0x1ab/0x1d0
[  144.343520][ T9568]  invalid_op+0x14/0x20
[  144.347702][ T9568] RIP: 0010:static_key_slow_try_dec+0x1ab/0x1d0
[  144.353946][ T9568] Code: c0 e8 d9 07 e5 ff 83 fb 01 0f 85 32 ff ff ff e8 4b 06 e5 ff 45 31 ff eb a0 e8 41 06 e5 ff 48 c7 c7 40 f3 92 87 e8 ad 6e b6 ff <0f> 0b eb 8b 4c 89 e7 e8 f9 46 1f 00 e9 de fe ff ff e8 4f 67 b6 ff
[  144.373562][ T9568] RSP: 0018:ffff888061bff450 EFLAGS: 00010286
[  144.377549][ T3896] kobject: 'loop3' (000000008424cf0a): kobject_uevent_env
[  144.379632][ T9568] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000000000
[  144.379642][ T9568] RDX: 000000000001598d RSI: ffffffff815bfa86 RDI: ffffed100c37fe7c
[  144.379652][ T9568] RBP: ffff888061bff4e0 R08: ffff8880977c0400 R09: ffffed1015d260b1
[  144.379662][ T9568] R10: ffffed1015d260b0 R11: ffff8880ae930587 R12: ffffffff89865a80
[  144.379671][ T9568] R13: ffff888061bff4b8 R14: 1ffff1100c37fe8b R15: 00000000ffffff01
[  144.379706][ T9568]  ? vprintk_func+0x86/0x189
[  144.379729][ T9568]  ? static_key_disable+0x30/0x30
[  144.379749][ T9568]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  144.379775][ T9568]  ? ip6_datagram_send_ctl+0x569/0x1b80
[  144.386908][ T3896] kobject: 'loop3' (000000008424cf0a): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  144.394854][ T9568]  __static_key_slow_dec_deferred+0x65/0x110
[  144.394875][ T9568]  fl_free+0xa9/0xe0
[  144.394891][ T9568]  fl_create+0x6af/0x9f0
[  144.394912][ T9568]  ? ip6fl_seq_next+0xb0/0xb0
[  144.394931][ T9568]  ? __might_fault+0x12b/0x1e0
[  144.394950][ T9568]  ? find_held_lock+0x35/0x130
[  144.394966][ T9568]  ? __might_fault+0x12b/0x1e0
[  144.394992][ T9568]  ? lock_downgrade+0x920/0x920
[  144.395025][ T9568]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  144.503203][ T9568]  ipv6_flowlabel_opt+0x80e/0x2730
[  144.508343][ T9568]  ? ipv6_flowlabel_opt_get+0xa10/0xa10
[  144.513888][ T9568]  ? lockdep_hardirqs_on+0x418/0x5d0
[  144.519267][ T9568]  ? lock_sock_nested+0x9a/0x120
[  144.524218][ T9568]  ? lock_sock_nested+0x9a/0x120
[  144.529161][ T9568]  ? __local_bh_enable_ip+0x15a/0x270
[  144.534581][ T9568]  do_ipv6_setsockopt.isra.0+0x2125/0x4120
[  144.540814][ T9568]  ? do_ipv6_setsockopt.isra.0+0x2125/0x4120
[  144.546826][ T9568]  ? ipv6_update_options+0x3b0/0x3b0
[  144.552115][ T9568]  ? ___might_sleep+0x163/0x280
[  144.556957][ T9568]  ? __might_sleep+0x95/0x190
[  144.561639][ T9568]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  144.567890][ T9568]  ? futex_wait_queue_me+0x414/0x600
[  144.573161][ T9568]  ? handle_futex_death.part.0+0x250/0x250
[  144.578968][ T9568]  ? lock_pi_update_atomic+0x120/0x120
[  144.584439][ T9568]  ? get_futex_key_refs.isra.0+0x72/0xc0
[  144.590075][ T9568]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  144.595997][ T9568]  ? drop_futex_key_refs.isra.0+0x6f/0xf0
[  144.601726][ T9568]  ? __kasan_check_read+0x11/0x20
[  144.606747][ T9568]  ? mark_lock+0xc0/0x11e0
[  144.611330][ T9568]  ? __kasan_check_read+0x11/0x20
[  144.616514][ T9568]  ? __lock_acquire+0x8a2/0x4c30
[  144.621456][ T9568]  ? drop_futex_key_refs.isra.0+0x6f/0xf0
[  144.627614][ T9568]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  144.633850][ T9568]  ? aa_label_sk_perm+0x101/0x560
[  144.638883][ T9568]  ? __fget+0x35d/0x560
[  144.643058][ T9568]  ? aa_profile_af_perm+0x320/0x320
[  144.648456][ T9568]  ? __fget+0x35d/0x560
[  144.652605][ T9568]  ? lock_downgrade+0x920/0x920
[  144.657440][ T9568]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  144.663688][ T9568]  ? __kasan_check_read+0x11/0x20
[  144.668830][ T9568]  ? ___might_sleep+0x163/0x280
[  144.673680][ T9568]  ? __might_sleep+0x95/0x190
[  144.678353][ T9568]  ipv6_setsockopt+0xf6/0x170
[  144.683039][ T9568]  ? ipv6_setsockopt+0xf6/0x170
[  144.687897][ T9568]  tcp_setsockopt+0x8f/0xe0
[  144.692515][ T9568]  sock_common_setsockopt+0x94/0xd0
[  144.697798][ T9568]  __sys_setsockopt+0x261/0x4c0
[  144.702744][ T9568]  ? sock_create_kern+0x50/0x50
[  144.707603][ T9568]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  144.713046][ T9568]  ? do_syscall_64+0x26/0x6a0
[  144.717709][ T9568]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  144.723776][ T9568]  ? do_syscall_64+0x26/0x6a0
[  144.728454][ T9568]  __x64_sys_setsockopt+0xbe/0x150
[  144.733576][ T9568]  do_syscall_64+0xfd/0x6a0
[  144.738086][ T9568]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  144.743982][ T9568] RIP: 0033:0x4597c9
[  144.747910][ T9568] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  144.767594][ T9568] RSP: 002b:00007fcfd972ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  144.775998][ T9568] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004597c9
[  144.783974][ T9568] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  144.791970][ T9568] RBP: 000000000075c070 R08: 000000000000fd07 R09: 0000000000000000
[  144.799942][ T9568] R10: 0000000020000200 R11: 0000000000000246 R12: 00007fcfd972b6d4
[  144.807920][ T9568] R13: 00000000004cec00 R14: 00000000004dd520 R15: 00000000ffffffff
[  144.817028][ T9568] Kernel Offset: disabled
[  144.821472][ T9568] Rebooting in 86400 seconds..