datasync(r4) [ 418.856803][T17671] blk_update_request: I/O error, dev loop0, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 21:33:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:33 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r3, 0x0, r2) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r9, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000c85000)={0x90000006}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000002c0)={0xa, 0x6, 0x1f, 0x1, 'syz1\x00', 0x2}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4466649c42f4ed537e5db8d4b1a8", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40102108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000010}, 0x40000) 21:33:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 419.260283][T17708] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 419.299489][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 419.305335][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:33 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @win={{0x800, 0x1839, 0x8, 0x7fff}, 0x1, 0xfffffffa, &(0x7f0000000080)={{0x200, 0x4f2eadba, 0x1f, 0x9}}, 0x5, &(0x7f0000000340)="e3802c23693e475e15b65e681b2f4449c14e9a045600cc0f6ba3b2d8b4b092785a5ce0215edec38d15365943a5e98935ca2cc151e6d0775fa1955093d178781f5abc922671b6af32b5edfcf7a474d620ee38c8bab55d66c87a765afec63dec538a91b2187db448dca5f6e199fb8930e5c721b740a289b755745bf71058566e2b10b13fe321dfeb1f1984b8a5c787aa76842930d40482c2a6b6e8631b2b36f85f4138f34e27e9fa767461a119ccd683289d1b19e60b8782b305a8ad108f9cb8e285e311728959ee46e4d63fe2f6f6c0cf6b"}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8) close(r1) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=""/83, &(0x7f0000000000)=0x53) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0xfff, 0x4, 0x1429, 0x1}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0xeca, 0xfffffffc}}, 0x30) ioctl$sock_ifreq(r4, 0x89b0, &(0x7f00000001c0)={'syz_tun\x00', @ifru_data=&(0x7f0000000180)="c4ffcaf50414b56537c797e75d269577d956dbd4c6fa04a944cace34a0e9dc0a"}) 21:33:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:33 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) [ 419.856096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.861966][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0x0, @sdr={0x44416866, 0x1}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x9c302bdcc775fd4a, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r2, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, @ib={0x1b, 0x80, 0x0, {"da0305367e331f04353491274f5524d5"}, 0x8000, 0x1, 0x8}}}, 0x118) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000000000)=""/19) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) [ 420.106163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 420.114624][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in=@local, 0x4e24, 0xa0, 0x4e22, 0x9, 0x4, 0xa0, 0x20, 0x0, 0x0, r3}, {0x4, 0x8000000000000000, 0x400, 0x7fffffff, 0x3f, 0xfff, 0x9, 0x7}, {0x1, 0x5, 0x95b, 0xfff}, 0x64cc, 0x6e6bb8, 0x4, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x12}, 0x4d5, 0xe6}, 0xa, @in=@remote, 0x3504, 0x4, 0x3, 0x3f, 0x1000, 0x7fffffff, 0x890}}, 0xe8) r4 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/13) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000180)=0x1) 21:33:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000440)={0xd9a9, 0x0, 0x1, {0xa, @pix={0x0, 0x0, 0x7c147666, 0x2, 0xff, 0x1, 0x3, 0x40, 0x0, 0x8, 0x1, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r8, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x40}, [{}]}, 0x78) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x7f, @ipv4={[], [], @multicast1}}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x400}}, 0x10) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 21:33:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/\xe8\v%{swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0x8313b4b51f8cf6e, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r8, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r8, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000640)=""/43, 0x2b}, 0x4d641f1846a5720d) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) [ 422.289873][T17914] blk_update_request: I/O error, dev loop0, sector 392 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 0 21:33:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x8000, 0x9, 0x2, {0xb, @sdr={0x0, 0x1}}}) socket$inet6(0xa, 0x80000, 0x2) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x4}) 21:33:36 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r8, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:37 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r8, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000180)=0x1) close(r1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/237, &(0x7f0000000100)=0xed) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 423.456087][ C0] net_ratelimit: 18 callbacks suppressed [ 423.456096][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 423.467784][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:37 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r8, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:37 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x421, 0x408002) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "d791ef6d4ce10ce9", "4d376334a269090e36a6878aae065b897bd5cfa4a4764a0577df986dc38f8391", "b3fa08f6", "dd2ff82526437f84"}, 0x38) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x92, 0x9, 0xa84, 0x3, 0x3ff, 0x7d, 0x0, 0x8, 0x3}}, 0x43) remap_file_pages(&(0x7f0000e5b000/0x1000)=nil, 0x1000, 0x2000008, 0x827, 0x8000) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 21:33:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:38 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x6135f5da0) 21:33:38 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 424.016074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.022614][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:38 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/13}) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r6, 0x8818564c, &(0x7f0000000540)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 424.256224][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.262924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 424.271003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.277739][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) [ 424.416091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.422101][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:38 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 424.485829][T18079] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 21:33:38 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) r2 = gettid() r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xfff}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x2, 0x5, 0x1, 0x4, 0x7, r7}, &(0x7f0000000340)=0x20) r8 = getpgrp(r3) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x860, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, 0xffffffffffffffff}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x573a56fc874058bc}, 0x4000) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x3, 0x33fb, {0x53, 0x5, 0x1, {0x8001, 0x4}, {0x200, 0x25fe}, @ramp={0x6, 0x2, {0xa6f1, 0x1, 0x9, 0x6}}}, {0x54, 0x7, 0x70ab, {0x0, 0xfff}, {0x7, 0x401}, @rumble={0x4, 0x7fff}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x10, 0x80002, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8) close(r13) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000400)={@ipv4={[], [], @multicast1}, 0x273, 0x3, 0x1, 0x1, 0x1, 0xfff}, &(0x7f0000000580)=0xd67f88a0dadaa6d2) r14 = socket(0x10, 0x80002, 0x0) r15 = fcntl$dupfd(r14, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ERR(r15, 0x4008af22, &(0x7f00000003c0)={0x2}) ioctl$KVM_GET_REG_LIST(r11, 0xc008aeb0, &(0x7f0000000380)={0x2, [0x0, 0x7]}) 21:33:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000080)=0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x4, {0xb, @pix_mp={0x5, 0xddc3, 0x4f565559, 0x7, 0x2, [{0x7d7, 0x3}, {0xfcc, 0x401}, {0x7}, {0xfff, 0x200}, {0x62c, 0x5}, {0xc1c54a6, 0x3}, {0xb5, 0x7fff}, {0x6, 0x8}], 0x1c, 0x5, 0x2, 0x0, 0x6}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:39 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) listen(r0, 0x7400) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x477041c, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r8}]]}}}]}, 0x38}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@multicast2, 0x4e20, 0x2, 0x4e20, 0x2, 0x2, 0x10, 0x100, 0x3a, r8}, {0x1, 0x9, 0x9, 0x1, 0x8, 0x100000000, 0x90, 0x4}, {0x3ff, 0x7, 0x8, 0x5}, 0xff, 0x6e6bb9, 0x0, 0x1, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0x6c}, 0x2, @in6=@mcast2, 0x34ff, 0x0, 0x0, 0x9, 0x6, 0x7fffffff, 0x7fffffff}}, 0xe8) r9 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r9, 0x0, r1) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x19, &(0x7f0000000140)={r13}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001b00)=ANY=[@ANYRES32=r13, @ANYBLOB="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"], 0x0) sendmsg$inet_sctp(r10, &(0x7f00000015c0)={&(0x7f0000000240)=@in={0x2, 0x4e21, @rand_addr=0x5}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001300)="1cc380104b765c9610b8deb57cdb36902b06b370690c6f696c0b1fd955ec0aff5c541a550d8bdc0b9341288c031ea291a585fc399bf5c7eaf5eaf47a333b2c245c8b88256823527c9ebe49be267d0059b8b5032de429317a117d4b6cd2558b5639", 0x61}, {&(0x7f0000001380)="b03e4cfae5ac6962ec405ab7b06379768624ad2a4bd29e57eeb09a4f717ddd843ec4b0337c5b06b84a69e60e139bf3a74c1bb363fb2b9e0005168c67fa28edccc085e294c5b6fd5874578081f07a774c693283ab2dca08fdadda86d55e691b11560176ea06a53cfc", 0x68}, {0x0}], 0x3, &(0x7f0000001500)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0x6, 0x6, 0x4, 0xfffa}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x400e, 0x95, 0x3ff, r13}}], 0xb0, 0x7713a568f693495b}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000000)={r13, 0x1}, 0x8) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r4, &(0x7f0000000100)=@llc, &(0x7f0000000180)=0x80, 0x1c00) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000001c0)=0x20, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, r6, 0x805, 0x0, 0x0, {{0x1, 0x40030000000000}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x123b7a32f0acbced}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x11183385, 0x5, 0x4}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/Cev\'swradig#\x00', 0x1, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) read(r1, &(0x7f0000000140)=""/192, 0xc0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x1, {0x0, 0xf0, 0x1}, {0x6, 0x0, 0x4}, 0x2, 0xfd}, {0x0, 0x2, {0x0, 0xf0, 0x3}, {0x3, 0xff, 0x2}, 0xff}, {0x3, 0x0, {0x0, 0xf0, 0x1}, {0x0, 0x0, 0x2}, 0xfd, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x2}, {0x2, 0x1}, 0x3, 0x75ccc20138547114}, {0x0, 0x1, {0x1}, {0x0, 0xff}, 0xfd, 0xfe}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x2, 0xff, 0x1}, 0xfd, 0x1}], 0xc0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x31324d59, 0x6}}}) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x2a2) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0x9, @sdr={0x31435750, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x3, 0x9, 0x3, {0xb, @sdr={0x3032344d, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:41 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:41 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x4, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0x37, 0xfff, 0xfff, 0x7, 0x6}}, {0x7, 0x8, 0x0, 0x0, @msi={0xffff, 0x80000000, 0x8}}, {0x5, 0x0, 0x0, 0x0, @irqchip={0xffffffff, 0x10001}}, {0xfffffbff, 0x2, 0x0, 0x0, @sint={0x100, 0xffff}}]}) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) 21:33:41 executing program 5: add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r2, 0x0, r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x19, &(0x7f0000000140)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001b00)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x0) sendmsg$inet_sctp(r3, &(0x7f00000015c0)={&(0x7f0000000240)=@in={0x2, 0x4e21, @rand_addr=0x5}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001300)="1cc380104b765c9610b8deb57cdb36902b06b370690c6f696c0b1fd955ec0aff5c541a550d8bdc0b9341288c031ea291a585fc399bf5c7eaf5eaf47a333b2c245c8b88256823527c9ebe49be267d0059b8b5032de429317a117d4b6cd2558b5639", 0x61}, {&(0x7f0000001380)="b03e4cfae5ac6962ec405ab7b06379768624ad2a4bd29e57eeb09a4f717ddd843ec4b0337c5b06b84a69e60e139bf3a74c1bb363fb2b9e0005168c67fa28edccc085e294c5b6fd5874578081f07a774c693283ab2dca08fdadda86d55e691b11560176ea06a53cfc", 0x68}, {0x0}], 0x3, &(0x7f0000001500)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0x6, 0x6, 0x4, 0xfffa}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x400e, 0x95, 0x3ff, r6}}], 0xb0, 0x7713a568f693495b}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x10, 0x80002, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000180)={'vlan0\x00', @broadcast}) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r6, 0x10001, 0x5, 0x3}, &(0x7f0000000040)=0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket(0x10, 0x80002, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000400)=0xc) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write$vnet(r13, &(0x7f0000000080)={0x1, {&(0x7f0000002700)=""/4096, 0x1000, &(0x7f0000000540)=""/251, 0x3, 0x3}}, 0x68) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYBLOB="b00000003b557988e1353d23b5ccf569b5bc460060ee1184aac17ab946adb23e796e1e4ef740f19dbb1bee026da14dac5cc6de54391ccaf9d2d470019cd43cc90bd99f5a918a770f468dbd0723730f02eb8aadcaf541f06f672468b79d84f5caa5eb776cf515a6b430d09a03117bc5989ac3f9566bbac4daacb2ba03f60e97847a6db94a1266107f3e4fae0ecc81f7d0d79180e24231e093a304d067869772aac0bc53bf78a7ee9ac07d337965e83b9bc4a74ff7ece03ff63144191149772d0041128599884f9dfa6507f0342a9348a6fb27ce17661fef3858b29fe8c086e4de30987103cc5d57e0045a60877fb58c4455f8e9f68abb751a7db7098a4bea617d423f9f4f96e15554d91b0ccebab1fd941c93413d55144832ef6181c93d2de2b54c8bd2652f9ef6604cb252171497"], &(0x7f0000000140)=0xb8) 21:33:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 427.728007][T18328] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 21:33:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x8, 0xfffffffffffffff7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4600000000000000000022000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000007c0900"/120], 0x78) read(r1, &(0x7f0000000000)=""/57, 0x39) 21:33:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x800, 0x4) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 428.576088][ C1] net_ratelimit: 22 callbacks suppressed [ 428.576098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.587736][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r10, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r6, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet_sctp(0x2, 0x4, 0x84) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/swradio#\x00'}, {0x20, '){ppp0'}], 0xa, "e2c7a839b1899a9da30f8438342f1370f2ec8fb5856346de84e3780bdad06a87fea5d72414b87fbf09e30f2cec5f7c6d701e51b591c32cd554e86c6ca1888a9bdc8a06d17c61626303497b76d263051388c65de0d1bf3b99527440438d887d8e585427963064fe58254ea3f137"}, 0x8e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000100)=0x6, 0x4) 21:33:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 429.136088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 429.142043][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/d\x00v\x00\x00wm\x18s\xbbo#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) arch_prctl$ARCH_GET_CPUID(0x1011) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x282100) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x2) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r7, 0x0, r6) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x85b4, 0x5cba3cd0acb778a3, 0xfffffffffffffff7, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000080)={r8, 0xfff8}, 0x8) 21:33:43 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x10000, 0x4) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 429.696550][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 429.703199][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:43 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r6, 0x0, r5) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000023c0), &(0x7f0000002400)=0x4) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/137, 0x89}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/193, 0xc1}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x5) r7 = socket(0x10, 0x80002, 0x0) r8 = fcntl$dupfd(r7, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x10, 0x80002, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r11, 0xc100565c, &(0x7f0000000000)={0x0, 0x9, 0x2, {0x1, @sdr={0x49323159, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:44 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000100)=""/105, 0x69}], 0x3, 0x78) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x3, {0xb, @raw_data="807f4cb43b0a0be57417c715da02afe225760926ae4566d643c7f8be2709490670048c0cb2d34e0bae462b1aec861fea40c6bc2dc936b8e7d5fa6e5a1ca7da74396c914b9f07b90a591f5289313d0b66ec609cf00b2a074440eb908b3d84b8ab8864c0075ab885bb14bab682bfa457d9781785d215e93f71f7921c30552ed4bf585b65c97bf2fa63caa8bd3ffa40432996ac3233c3e93ed68c07f7b15e070a3cc7e2eb9ab74767140bac2be983b00c0e579f00bb177547a2608054ac3ca70d68d902c00b4eaa59f9"}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000240)=0x40) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 430.256089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.262195][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:44 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:44 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) fchownat(r3, &(0x7f0000000000)='./file0\x00', r4, r5, 0x400) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) [ 430.496057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 430.502008][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xff, 0x7, 0x2, {0x3, @sdr={0x4745504a, 0x3}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x2, {0xa78}}, 0x18) 21:33:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 430.954983][T18565] blk_update_request: I/O error, dev loop0, sector 904 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 21:33:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) prctl$PR_GET_DUMPABLE(0x3) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:45 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000000)=0x8) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:45 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x3f, 0x29, 0xfcc, 0x3}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r4 = shmget$private(0x0, 0x4000, 0xbcf59631757991bd, &(0x7f0000e4e000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) 21:33:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:46 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x800, 0xa, 0x4, 0x20, {0x0, 0x2710}, {0x4, 0xe998e5cc3528b3e9, 0x20, 0x5, 0x7, 0xff, "ca43dff5"}, 0x3, 0x4, @offset=0x95, 0x4}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:46 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:46 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x28000, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1a38, 0xeaf23ec0d080db17) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000000) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x393) 21:33:46 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:46 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000038000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000053ab1f4fd3fdc147455a1bfb22267334c96ef90c75b3afc131a9f5519a5563df3489bc3240132dbaecd695355ed700"/166], 0x78) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8, @remote, 0x5}, {0xa, 0x4e21, 0x5, @mcast1, 0x2}, r4, 0x7fff}}, 0x48) r5 = socket(0x10, 0x80002, 0x0) r6 = fcntl$dupfd(r5, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x80045300, &(0x7f0000000000)) 21:33:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2, 0xcfc669291ddedd0d, 0xfc) fcntl$dupfd(r2, 0x0, r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e22, @multicast1}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r4, &(0x7f0000000100)="b4ffec71af06d9bc8bf9dbe5c01b4ab0ccd2a3aed7cbcc34bad3b67718257ba584bf8489663262e9b02be30db89835367fd062a79b27689473799769d310e00b0bab1ea5652cae45e9c1a8ca3daaec474696fcc66137d864fc2c495194", 0x5d, 0x3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r5, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x17, 0x9afb, 0x20}, {{0x77359400}, 0x15, 0x3ff, 0x401}, {{0x0, 0x7530}, 0x16, 0x8, 0x1}], 0x48) r6 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="1926dc3853974c6c716187ddf6bed78751d6c478896aa9158e340cac7dcb574b32d5e8cc6d16cecfac614b0f5e000842a691d761b5e5cc7582eaf15f7166420226884f40b03a544b3976b0c0469edde198ca2e8209b65b82e644cf051802e7", 0x5f}], 0x1, 0x13) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r6, 0x0) r7 = msgget$private(0x0, 0x579) msgctl$IPC_INFO(r7, 0x3, &(0x7f0000000080)=""/106) 21:33:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 433.856047][ C0] net_ratelimit: 18 callbacks suppressed [ 433.856056][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 433.867750][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x5, 0x8, 0x1f, 0x9, 0x0, 0x10001, 0x12100, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e83c97c, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x9}, 0x200, 0x2, 0x0, 0x9, 0xec91, 0x1ff, 0x9}, 0x0, 0x10, r3, 0x1) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x2) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) [ 434.416049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.421947][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 434.656066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.661961][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.667860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.673864][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_TSC(0x1a, 0x0) [ 434.816082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.821919][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 435.438970][T18889] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 21:33:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ed2000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 21:33:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, 0x19, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x3) 21:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00'}, 0x45c) close(r1) prctl$PR_GET_DUMPABLE(0x3) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000), 0x4) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x4, 0x81, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) socket$inet(0x2, 0x3, 0xc0) 21:33:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)={0x0, 0x9, 0x20, &(0x7f0000000040)=0x8000}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0x8, @sliced={0x2, [0x3, 0x3, 0x3ff, 0x1, 0x4, 0x1ff, 0x7ff, 0x1, 0x40, 0xbbc5, 0x1000, 0xffff, 0xfff7, 0xff, 0x8, 0x9, 0xff, 0x2, 0x46f6, 0x4, 0x401, 0x7ff, 0xfff9, 0xc869, 0x81, 0x5b14, 0x6, 0x9, 0x0, 0x6, 0x5, 0xca2f, 0x3, 0xfffe, 0xff80, 0x5, 0x1f, 0x7, 0x6, 0x5, 0xeb, 0x3, 0x6, 0x5, 0x2, 0x4, 0x6, 0x20], 0x80000000}}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20c080, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40, 0x0) write$P9_RATTACH(r2, &(0x7f0000000140)={0x14, 0x69, 0x1, {0xd4, 0x4, 0x6}}, 0x14) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3ff, 0x80) ioctl(r1, 0xffffffffffff5057, &(0x7f0000000240)="5bd0e95774496c6a11dd25f721c355f11dabdfcfaee444bfb59432c38b078aba334d13b70ef55c7fd0c548e680d8c20126e1a1c9a80c7b71aeb9ff9b4bfab9d7fc8f3990e6bd97016722e1203b660db89009d5758dbf534af5f19a") ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x3, {0xb, @win={{0x7, 0x400, 0xeb, 0x8f95b59}, 0x9, 0x401, &(0x7f0000000080)={{0x40, 0x1, 0x6, 0x6}, &(0x7f0000000040)={{0x0, 0x8001, 0x400, 0x9}, &(0x7f0000000000)={{0x5c6, 0x5, 0x401, 0xef60}}}}, 0x4, &(0x7f00000000c0)="ccc93a9f607318a0d27c4f194b8ed68fd9382f2c98512cdadd040d267b67f89bafdb15ebb6716810b345c1171be9dfb49576de750b393d0ab5d73ef3a54dbdbdafc6487cab295e1ab661a37fb1597523520a46287dc23a1ee711e5089aed2d", 0x4}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0x2, 0x4) 21:33:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(0xffffffffffffffff) 21:33:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3f, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @pix_mp={0x9, 0xdc38, 0x31364d59, 0x2, 0x0, [{0x6}, {0x2, 0x100}, {0x0, 0x6}, {0x6e0, 0x7}, {0x6, 0x400}, {0xfffffffe, 0x7fffffff}, {0x52, 0xffffffff}, {0x3f, 0xd}], 0x0, 0x7, 0x6, 0x2, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) 21:33:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)=';\xb12\x1e*\v\x10\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x0, 0x6, 0x2) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x10100, 0x0) writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000140)="5452eb675d2aa3224dd0c4246b3d914b2e9f7c40b8ef3ac9eb30b530662519ffc9caf46e289d5f51bcbea1c93e36682860e305960dce1b486019f2ae5e9bc177d7cbe30455abeca6d7235c92ef0532a7acdf6b4a790c39d7", 0x58}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="774666d51d2515eb002534f84399a947f66e55d9a1689f1a53b17547e16210cad76828805a4d858f62931e3ca384bdd484edbe8b5d3c8ce4f6f98c4ef1e4bdb217a8ce7b605d3429f6eef4dc8be36804318acc982daf913e7894461224f80d6f08de88f0ff3b67a14ada03842c459c558fdaf5d83a85765206d5d497d0717f7828d9271750d4058c768a3f0b5fb6297a47216e9197ca7f0321c60b039ed3ec5d22eb614590582f80fa910a1cb3442264e82d097c4e0c28ac3eb6b1a92e930e0536478ffbeac4daee83f625f946b63bff0d73b7", 0xd3}, {&(0x7f00000003c0)="583acd02d868ef38ba3f595be712e080d3ada4c61f8abe9529dc1818f054f4121bcd9866b8f69c7dc9e1f8c43091ee361e3a6de7c242025cd2473fb4d7b204bda256a4ef5ffee3744fdaae1c8755a36b5d0e42f110c7049f04da080ed051e1", 0x5f}, {&(0x7f0000000540)="9c31ae669dbd776b331fae3562291f913aa2e63226154050a11cda", 0x1b}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="2bfb99dcdf3c35688ac8252790655bbdd93e9910db2a20e726bc9bedbb8ea37c48f7d84c9867453067004be63c43c463732375a40eeedab5f20a", 0x3a}, {&(0x7f00000015c0)="4f06b2f0b2b27246d8256afea9e3336da4045ce2f58033ad670dd205c175e6638f595fcb65a51e8e625c17da826a807f9768ed0bf45bf2c230c7b617595eaf13c9e92fa86ffaef1c03fa04b5035b7cd40e12e97d8fd5fa075d05c7cb42f1c7ca5ed98832da4eb08935893b6320409c76cea418acb64b380c31b487748982171feff1a479a78fac8b46c6265331930209b76be22df44e9a23fc891c0ba6493cb1aa6d6f83bdf3519db9236027fe56d342633f8c0993474fb1168a238d998d0c12bbaf809eba2fc5bc81b0e6f75464710c5f172d79c4f36013967c1ef86c15071627fcbdfc1b0dbd163ce1e1049d7bbe031b0dd013b8ae", 0xf6}], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000040)=0x3) 21:33:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x6, {{0x80000001, 0x182, 0x5, 0x6, 0x10000, 0x9ea, 0x0, 0x7fffffff}}}, 0x60) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x2, 0x1, @start={0x9}}) 21:33:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 438.976070][ C1] net_ratelimit: 22 callbacks suppressed [ 438.976079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.981884][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 439.536903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.543586][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 439.838337][T19213] blk_update_request: I/O error, dev loop0, sector 904 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 21:33:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 440.096064][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 440.101974][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000fef000/0x1000)=nil, 0x5000) shmdt(r2) shmdt(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000000)={{0x1, @addr=0x6}, 0x8, 0x100000000, 0xe28}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0xc00) accept$alg(r1, 0x0, 0x0) socket$inet6(0xa, 0x806, 0xf2) 21:33:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 440.656060][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.663423][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r2, 0x0, r1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x400001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000080)={'Hf\x00\x00\x00\x00\x00\x00\x00\x00\xde\x00\x00\x00\x00\x00\x00\x00\x00\x05\x0f,2\x18\x00'}, &(0x7f0000000100)=0xed) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 440.906083][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 440.912128][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x121200, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x7, 0x4}]}, 0xc, 0x3) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) lseek(r2, 0x6db1, 0x1) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000700)=@v2={0x2, @aes256, 0x0, [], "a4c4e6fe2822699edae6686a8834bd28"}) r1 = socket(0x10, 0x80002, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1bab", 0x1f}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1f", 0x1) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:56 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0x7fff, 0xb7a, 0x5, 0x5, 0xfff}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x7fffffff) 21:33:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:56 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0xa) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) dup(r1) 21:33:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 442.559830][T19399] blk_update_request: I/O error, dev loop0, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 21:33:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:56 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000440)={0x6, 0x9, 0x4, {0xb, @sliced={0x2, [0x6931, 0x2, 0x7, 0x82, 0x8, 0x9, 0xffff, 0x8000, 0xff19, 0x100, 0xb, 0x9, 0x2, 0x4, 0x2, 0x7, 0xe33c, 0x6f7, 0xfff, 0x8, 0x2, 0x3, 0x8, 0x2, 0x3, 0x9, 0x6, 0xfff, 0x7fff, 0x9, 0x2, 0x4b, 0x998, 0x351b, 0x1, 0xfff, 0x8, 0x20, 0x3, 0x7, 0x4, 0x6, 0x2, 0x8, 0x8, 0x6f9, 0x3f], 0x3}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) 21:33:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r2, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80480}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe66, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1004c014}, 0x800) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x0) 21:33:57 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:33:57 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x24d440) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x101003) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x7ffe, 0x1, 0x4, 0x5}) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x7, &(0x7f0000000100)=0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:57 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xb2, 0x2000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/154, 0x9a}, {&(0x7f0000000100)=""/77, 0x4d}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/14, 0xe}], 0x7) 21:33:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:57 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0xff, 0x1, {0xb, @sdr}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000001f379656d1d9b7bb9e00"/120], 0x78) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) [ 444.091473][T19529] blk_update_request: I/O error, dev loop0, sector 896 op 0x0:(READ) flags 0x80700 phys_seg 18 prio class 0 21:33:58 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(r2, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x81ac, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="006fb6b86207e227f7638602c9db22ab957404a8e2d14ef174aad8fc62575776cb6bd838973605b0e7070d83608c0b291152a3bb4c77addfbfb47de3356956910b5c081b17f1dd4575b8f3a77a4fb7af532fa70f8474e61cdcfc4faa4f6350318d3c", 0x62}, {&(0x7f00000000c0)="ea1551deb58740d75acfd9527b3f2f2d160208", 0x13}, {&(0x7f0000000100)="1a422b67a4faad4e780f1912206b741c3c3d684dcfd7dd5a7da16d3877572b8e7e8e5708cce29d07a8e092e0ab47729d4f2a3aeaabc925492d5bf41c5a73fc90097f05a9726ab82503c18fde56fd4798fc0eda0c7516aab2f52ebe74394c2413", 0x60}], 0x3, &(0x7f0000000240)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x3, 0x20, 0x0, [@loopback, @ipv4={[], [], @broadcast}, @mcast2, @rand_addr="ae8a7eacc1ea25e64f844ae031f2a0e6", @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @rthdrdstopts={{0xd0, 0x29, 0x37, {0x56fed9e90268953f, 0x16, [], [@calipso={0x7, 0x40, {0x325, 0xe, 0x1, 0xff92, [0x9, 0xff, 0x8, 0x7fff, 0x7f, 0x9, 0x5]}}, @pad1, @ra={0x5, 0x2, 0x8001}, @generic={0x40, 0x62, "93d68026f38f0658bcd03d6788f3cee6625f2c2a1c93f7298cb1c3a9565fbfe9dfb7f2725eb018102502f57f9e35b47e48f56e04aeb343be622e9829430cdc845e9b5c2556af57fe2c35a629016e7e1970892b10e8f9b23671718a321cdfc030d960"}, @jumbo={0xc2, 0x4, 0x10000}]}}}], 0x150}, 0x4) 21:33:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 444.256049][ C0] net_ratelimit: 18 callbacks suppressed [ 444.256057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.267658][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x3, {0x5, @pix_mp={0x1f, 0x9, 0x32314d59, 0x6, 0x4, [{0xfffffffe, 0x40}, {0x70aa, 0x3}, {0x1, 0x3ff}, {0x700000, 0x1}, {0x6676, 0x501ff99a}, {0x5, 0x5}, {0xfffffffe, 0xff}, {0x4, 0x5}], 0x0, 0x8, 0x0, 0x6, 0x2}}}) mmap$binder(&(0x7f0000d31000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x200800000003) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4600000000000000000001000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000800"/112], 0x78) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = getpgrp(0x0) setpriority(0x0, r5, 0xffff) kcmp(0xffffffffffffffff, r5, 0x5, r2, r3) 21:33:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 444.816053][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.821952][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 21:33:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:59 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 445.056077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.062725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.068606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.074401][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:33:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 445.216076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.222010][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:33:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:33:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @pix_mp={0x1000, 0xfffff800, 0x6864b084, 0x1, 0x2, [{0x5, 0x93}, {0x6, 0x80}, {0x0, 0x4}, {0x80000000, 0x4143}, {0x1ff, 0x9}, {0x3ff, 0x40}, {0x3, 0x7f}, {0x3}], 0x6, 0xc7, 0x2, 0x1, 0x6}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) fstat(r1, &(0x7f0000000000)) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x66a123, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) 21:33:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)='\b\x00') r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 445.747265][T19636] blk_update_request: I/O error, dev loop0, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 21:34:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)='\b\x00') r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1a11b2a8, 0x10d080) syz_open_pts(r4, 0x200000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap$binder(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x1, 0x11, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x10, 0x80002, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f0000000040)={0x1, 0x0, 0x2017, 0xffffffff, 0x5, 0x474, 0x8}) 21:34:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:34:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x1a, @vbi={0x3, 0xf6e6, 0x80, 0x34343452, [0xff, 0x1], [0x4, 0x3], 0x1}}) 21:34:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)='\b\x00') r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000440)={0x1f, 0x10000, 0x1, {0xb, @pix={0x5, 0x0, 0x4dcf1d01, 0x5, 0x4, 0x0, 0x3, 0x8001, 0x1, 0x9a42cde311d2b49b, 0x2, 0x2}}}) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0xfffffffc, 0x4}}) 21:34:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:34:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r3) 21:34:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:34:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:01 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) [ 447.849546][T19773] blk_update_request: I/O error, dev loop0, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 21:34:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fdatasync(r3) 21:34:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:02 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 449.376109][ C1] net_ratelimit: 22 callbacks suppressed [ 449.376119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.381996][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:34:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 449.946152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.952081][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:34:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 450.062128][T19918] blk_update_request: I/O error, dev loop0, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 21:34:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0b") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r9, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 450.496044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.502559][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:34:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0b") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) 21:34:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe8") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r8 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) readv(0xffffffffffffffff, &(0x7f00000016c0), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 450.812938][T19986] ------------[ cut here ]------------ [ 450.834463][T19986] generic_make_request: Trying to write to read-only block-device loop0 (partno 0) [ 450.910916][T19986] WARNING: CPU: 1 PID: 19986 at block/blk-core.c:797 generic_make_request_checks+0x1d5c/0x2210 [ 450.921290][T19986] Kernel panic - not syncing: panic_on_warn set ... [ 450.921338][ T3906] kobject: 'loop2' (000000007c07a945): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 450.927966][T19986] CPU: 1 PID: 19986 Comm: syz-executor.0 Not tainted 5.4.0-rc7+ #0 [ 450.927989][T19986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.927995][T19986] Call Trace: [ 450.928015][T19986] dump_stack+0x197/0x210 [ 450.928034][T19986] ? generic_make_request_checks+0x1d00/0x2210 [ 450.928047][T19986] panic+0x2e3/0x75c [ 450.928058][T19986] ? add_taint.cold+0x16/0x16 [ 450.928080][T19986] ? __kasan_check_write+0x14/0x20 [ 450.984570][T19986] ? __warn.cold+0x14/0x35 [ 450.989021][T19986] ? __warn+0xd9/0x1d0 [ 450.993552][T19986] ? generic_make_request_checks+0x1d5c/0x2210 [ 451.000179][T19986] __warn.cold+0x2f/0x35 [ 451.004478][T19986] ? generic_make_request_checks+0x1d5c/0x2210 [ 451.010652][T19986] report_bug+0x289/0x300 [ 451.015002][T19986] do_error_trap+0x11b/0x200 [ 451.019616][T19986] do_invalid_op+0x37/0x50 [ 451.024049][T19986] ? generic_make_request_checks+0x1d5c/0x2210 [ 451.030227][T19986] invalid_op+0x23/0x30 [ 451.034409][T19986] RIP: 0010:generic_make_request_checks+0x1d5c/0x2210 [ 451.041196][T19986] Code: 00 00 44 8b ab 3c 05 00 00 48 8d b5 78 ff ff ff 4c 89 f7 e8 c6 87 05 00 48 c7 c7 60 18 e5 87 48 89 c6 44 89 ea e8 7c f9 13 fe <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 [ 451.060814][T19986] RSP: 0018:ffff8880628ff310 EFLAGS: 00010286 [ 451.066893][T19986] RAX: 0000000000000000 RBX: ffff8880a3a5f000 RCX: 0000000000000000 [ 451.075074][T19986] RDX: 0000000000000000 RSI: ffffffff815cf766 RDI: ffffed100c51fe54 [ 451.083060][T19986] RBP: ffff8880628ff410 R08: ffff88805baa6440 R09: ffffed1015d26159 [ 451.091048][T19986] R10: ffffed1015d26158 R11: ffff8880ae930ac7 R12: ffff8880935a6ac8 [ 451.099040][T19986] R13: 0000000000000000 R14: ffff8880935a6ac0 R15: ffff8880a3adf0b8 [ 451.107048][T19986] ? vprintk_func+0x86/0x189 [ 451.111696][T19986] ? trace_event_raw_event_block_rq_requeue+0x640/0x640 [ 451.118653][T19986] ? __kasan_check_read+0x11/0x20 [ 451.123792][T19986] ? __lockdep_free_key_range+0x120/0x120 [ 451.129549][T19986] generic_make_request+0x8f/0xb50 [ 451.134680][T19986] ? blk_queue_enter+0xe50/0xe50 [ 451.139641][T19986] ? lock_downgrade+0x920/0x920 [ 451.144516][T19986] submit_bio+0x113/0x600 [ 451.148875][T19986] ? submit_bio+0x113/0x600 [ 451.152376][ T3906] kobject: 'loop4' (00000000c2de5962): kobject_uevent_env [ 451.153411][T19986] ? generic_make_request+0xb50/0xb50 [ 451.165971][T19986] ? bio_associate_blkg_from_css+0x50c/0x990 [ 451.166289][ T3906] kobject: 'loop4' (00000000c2de5962): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 451.171964][T19986] ? bio_reset+0x3b0/0x3b0 [ 451.171981][T19986] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 451.171995][T19986] ? guard_bio_eod+0x294/0x6c0 [ 451.172008][T19986] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.172028][T19986] submit_bh_wbc+0x6b6/0x900 [ 451.172050][T19986] __block_write_full_page+0x7fe/0x11b0 [ 451.172068][T19986] ? bdev_evict_inode+0x5c0/0x5c0 [ 451.218495][T19986] ? __getblk_gfp+0xa10/0xa10 [ 451.223331][T19986] block_write_full_page+0x21f/0x270 [ 451.228635][T19986] ? bdev_evict_inode+0x5c0/0x5c0 [ 451.234815][T19986] blkdev_writepage+0x25/0x30 [ 451.239525][T19986] __writepage+0x66/0x110 [ 451.243868][T19986] write_cache_pages+0x80c/0x13f0 [ 451.248927][T19986] ? tag_pages_for_writeback+0x4b0/0x4b0 [ 451.254591][T19986] ? clear_page_dirty_for_io+0xde0/0xde0 [ 451.260331][T19986] ? __lockdep_free_key_range+0x120/0x120 [ 451.266081][T19986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.272349][T19986] ? debug_smp_processor_id+0x3c/0x214 [ 451.277835][T19986] generic_writepages+0xed/0x160 [ 451.282787][T19986] ? write_cache_pages+0x13f0/0x13f0 [ 451.288272][T19986] ? __lockdep_free_key_range+0x120/0x120 [ 451.294024][T19986] ? wbc_attach_and_unlock_inode+0x51a/0xa00 [ 451.300027][T19986] ? find_held_lock+0x35/0x130 [ 451.304813][T19986] ? blkdev_readpages+0x40/0x40 21:34:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0b") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x180, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0xe955c9dcc82f52a0, &(0x7f00000000c0)=0x5, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x926, 0x200, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002cbd7000fcabb08aca00000004120400080005000500000014000100f8c3ef9304ff480c5c848b72627520"], 0x3}, 0x1, 0x0, 0x0, 0x4008002}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3303a5fc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, r0, 0x0, 0x3f000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='\x06dev/&|\xda7s\xc0shb', 0x202100, 0x0) readv(r11, &(0x7f00000016c0), 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x2, 0x6ed, 0x4, 0x0, 0x0, [{r7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0xff}, {}]}) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) fdatasync(r4) [ 451.310206][T19986] blkdev_writepages+0x1e/0x30 [ 451.314993][T19986] do_writepages+0xfa/0x2a0 [ 451.319521][T19986] ? page_writeback_cpu_online+0x20/0x20 [ 451.325194][T19986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.331631][T19986] ? do_raw_spin_unlock+0x178/0x270 [ 451.336900][T19986] ? _raw_spin_unlock+0x2d/0x50 [ 451.341754][T19986] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.349508][T19986] ? wbc_attach_and_unlock_inode+0x63c/0xa00 [ 451.355637][T19986] __filemap_fdatawrite_range+0x2bc/0x3b0 [ 451.361557][T19986] ? delete_from_page_cache_batch+0xfe0/0xfe0 [ 451.367649][T19986] ? lock_downgrade+0x920/0x920 [ 451.372625][T19986] filemap_write_and_wait+0xf8/0x1e0 [ 451.377930][T19986] __blkdev_put+0x204/0x810 [ 451.382822][T19986] ? bd_set_size+0xb0/0xb0 [ 451.387324][T19986] ? wait_for_completion+0x440/0x440 [ 451.392627][T19986] blkdev_put+0x98/0x560 [ 451.396882][T19986] blkdev_close+0x8b/0xb0 [ 451.401231][T19986] __fput+0x2ff/0x890 [ 451.405209][T19986] ? blkdev_put+0x560/0x560 [ 451.409802][T19986] ____fput+0x16/0x20 [ 451.413796][T19986] task_work_run+0x145/0x1c0 [ 451.418395][T19986] exit_to_usermode_loop+0x316/0x380 [ 451.423710][T19986] do_syscall_64+0x65f/0x760 [ 451.428305][T19986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.434181][T19986] RIP: 0033:0x4141d1 [ 451.438071][T19986] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 451.457930][T19986] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 451.467210][T19986] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141d1 [ 451.475360][T19986] RDX: 0000001b31e20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 451.483326][T19986] RBP: 0000000000000001 R08: 00000000900f3a11 R09: 00000000900f3a15 [ 451.491289][T19986] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c9a0 [ 451.499337][T19986] R13: 000000000075c9a0 R14: 0000000000762f00 R15: 000000000075bfd4 [ 451.509208][T19986] Kernel Offset: disabled [ 451.513674][T19986] Rebooting in 86400 seconds..