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"]}, 0x936) 16:36:54 executing program 3: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff0000000000007a06010000000000000004810004010086009078fb07020060c5961e0003000000180000000054001803007605000001ff05000000000000000000000000000160102d55fa23d5ef8a34760e7a9e34f79ce48365c2205edbae3a529074aab92781a35d44ee92f41a87f57e89174767"], 0x0) [ 3040.150125] protocol 88fb is buggy, dev hsr_slave_0 [ 3040.155465] protocol 88fb is buggy, dev hsr_slave_1 16:36:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:54 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fstatfs(r0, &(0x7f0000000300)=""/49) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) arch_prctl$ARCH_GET_CPUID(0x1011) sendto$ax25(r2, &(0x7f0000000080)="f3d7731ec0bbfd41aa998e57af4e4ec0ad7a43aa9610c22cb7feaeb9a3c30bed7fd10465625770af4e4e22cce2fabbae0b2bd89b25163dfd61ca30dfd760c5fb3f4a3af88b4f881fca2f5f7ac73aa312b23a41284bdccc021dab037f8132ea565c8831fbebdabf7ae299d2392dc322dfe05c5b6edd8db9e2e51f821d5ee70b072e55ad2faf", 0x85, 0x8000, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:54 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) set_tid_address(&(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x20, 0x64ba1256cdec9a81, 0x5, 0xb96c}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0x3}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x5, 0x2}, {0x3f, 0x4}], r4}, 0x18, 0x0) 16:36:54 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x7000001c}) 16:36:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_eeprom={0xb}}) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'bridge_slave_0\x00', {0x1f}, 0x2}) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffff7fffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe8000000000000000000000000000000006000000000000072880000001080140000101000000000000ffffffffffffffff00000000d4eac415526012773b0ed6000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff05008ab8"], 0x0) 16:36:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x110000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) openat$cgroup_subtree(r2, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) [ 3040.630137] protocol 88fb is buggy, dev hsr_slave_0 [ 3040.635473] protocol 88fb is buggy, dev hsr_slave_1 [ 3040.641051] protocol 88fb is buggy, dev hsr_slave_0 [ 3040.646553] protocol 88fb is buggy, dev hsr_slave_1 16:36:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0x0, 0x100000) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$TIOCCONS(r0, 0x541d) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000001c0)=0x101) r4 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x28000) openat$cgroup_ro(r4, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000040)=""/250, 0xfa, 0x100, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 16:36:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netstat\x00\xdb\xa1\xd1\x1d\x15\xc3%\x93\x94\x9d\x90\x14\b-9\xebA\xa7\xe6\xadG\x93\f\xb9`8\x89\xe7&\x98c\x1ef\xdev\xcd@\xa5\xca\x93s\xdbo\n\xa8\xb6N?\x84z\xcf\xbcCa\xb5\x96\xd8ai\x96\xf1\t\xb5x\xd6\"\xc2\x90A\xe3\xd9\xe6\xa4\r\xc6Y8\xcfx\xe8\xda\xb3\xa4\xb4\xc8\xe1\x856\xb6\xd2\xef\x80)\x02:\xd9\xe8\x11\xdc\xf3BD\xcf\xce\x00\xbbK\b\xa0NA\xc8\x1f\xa2t\xf8\xcaX\x88/#\xb92\x9b\xe8x9t}nZ\b\xa7\xdbSS\x01);\x1a)\xd6\xdaE\xa7\xc7\xe1G\x1e\x84J\'\x1d\xf8\xc2a\xe3h\x7f~ga\x9d|\x1b\xe2\x88\x0e\x812n\xe3I\b?\xef\xdf\x80\xd2\r\xfeo\x0e\x0fV#:\xf4\xc6d\xa2\x1b\x1b^\xe3\x9f') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_proto_private(r2, 0x89ec, &(0x7f00000000c0)="130c09d9fe4bdd01fa53080b8c07f3eb646b89f888c21a925a7cb5b93c00fdc697873886afb1f06527af54a01a8a4541cc7c20712f28fd918743e6e632654f92cebeb0ca3a49afd8092274ef30c1d015dedf8aee832feb00d0a65773ee128bdd626f00ef7d67d4b62be35c0af044b3788cd94654b9efe3353884ca2e8b012c2707ee0dc44ed1c4d0e59d10854c8ba8268f6e16d390a7fce189d295eb724c89095c459d805d7dd4412d912ef398d8074ea49419619d48311a4264834252ffa97ee0693d18f033a3b07bac2a870c97e9e1d0f577ac31") sendfile(r1, r0, 0x0, 0xc0000008000000b) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x1f, 0x1, 0x101}, {{0x77359400}, 0x16, 0x1dd, 0x8}, {{r3, r4/1000+30000}, 0x15, 0x0, 0x9b}, {{0x0, 0x2710}, 0x1f, 0x20, 0x8}], 0x46) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:36:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 16:36:54 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20200, 0x0) fsetxattr$smack_xattr_label(r2, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000100)={'/'}, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:36:54 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@broadcast, @random="607c9a2d4373", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x7, 0x1, 0x40, [0x1, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="49040500c3fc0000000000000000"], 0x2c}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400002, 0x0) fgetxattr(r5, &(0x7f0000000300)=@known='system.advise\x00', &(0x7f0000000200)=""/216, 0xd8) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x31b200, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000580)={'broute\x00', 0x0, 0x3, 0xe6, [], 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f0000000480)=""/230}, &(0x7f0000000600)=0x78) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', r4}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000640)={0xe, 0x7, 0x8, 0x8, 0xef, "cbb6e51b93cda3bb73e0aab3adb655027b259b1a21c66f1c90b81fc2fdf3100d739329ec999fbc25d61e159b33c2f259e488d4efe0a63ae77cdd5cb4c0558b9ef6beab8b0974d4aee7d3af089f3925d2ec03d5d23cdbb8bd3b733a13a7eae64eb3acf30e5e1635611c4252ab228ddf0c6877d4df873ef1213b91b9e5306825095e0ee14ad4333440e6ec852763969ca45597609451dbde6faa4400410b350c6e37ef4ba4c18ac6f3cf8cd46ff2440c556ed6aa0dc68f50ba0661aef0b8aae60594b9073dd84571a4a2567c3903ae351e0f136f8976c0ba8e40d34546aadadfec895f5d141741ded84c05b616d17167"}, 0xfb) [ 3040.790148] protocol 88fb is buggy, dev hsr_slave_0 [ 3040.795465] protocol 88fb is buggy, dev hsr_slave_1 16:36:54 executing program 2: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x7, &(0x7f0000000780)=[{&(0x7f00000000c0)="731e9aff5700a7d2c22061767e3930487fe7947a2bd8be0e60f84a33a69ff642abecce56904c731368b44cb3d0fa3e90f6b54c94d81f89ef9ef18a8dd8a2203e42a116bd187e3545c63b230d947ae9d0ac30c0350ccd589048634c87b8fe65187e3499c0659bf00dfb03fb15aa23fce04d1ace15f8eed07a04337c724ff99c28c87dbbe8eaa40738bb4b1d49c22de1", 0x8f, 0x6}, {&(0x7f0000000400)="e0f5cef8f09616d9a3c34a6870e323a179c06eb795d542c732ebb0d0666fa3b3c8551bb96405cd25b95f7269ddbddb14edf17a16cec9f65267e0d82fb4d8d4ebcd8341ea300754df61dec9d69372f2595190ae23cfdf02280a37d286ad01845021d81157891449bbd359d0cb2d01c747837bd7a530499c0079f5fd9d1f250855d0811b05761060365af0dbdc6d1b7ae4366809adf9c29ed6e5d9f07edde4e83818dc65c8c5e315bc0daf06bd2873739d122f47a421bc37563de5e0943d5950bea54fdc42647749dabe585ba305e70b396067365c8956a83bfdab027dcc1d560b551bcbdc15cce310c7466e771a34000c749bd6d0c96a2f8207582392", 0xfc, 0x3ff}, {&(0x7f0000000500)="943ebbf5391e08d348e39a90663e7b8ddc2d72379b303aac9c96c094b26009673b4c7dac50169a061cd331ec6985b179409c5d18c4fca2fb4519418804e4a6455799473797c85a3770c63733dcfdc7c90aa04e16bc7cfc8e733a16e2c278f4803297f03af1d75fc3fd057d0d1bb0e012356f6bc9de599030e7fbebeb329820e442c047eae3579c53f4dc52ee29d6880a86a4a19d87aacea994e9a45c91a2ec13d82e1e885bfb0b59bea25050f3ad8e48eff989ae34f7eebe191c1ae982c358380fd668e5b1047a939559f79167703db9e2b179223d40ef1e31bfca48c060809030f59e7ea997d0d45d6a", 0xea, 0x80}, {&(0x7f0000000180)="a0befcbb0cf3538afc138c615da10c50c149f93950058d092223ec18937f0e288b", 0x21, 0x3}, {&(0x7f0000000300)="2ad8c98b0246da928bb5d0cafb123887cd90b65b1f125f495efa6ae4b0fe0aa4abf09c0123c9393986e142b78ae6ea2079434f02ef08857b8231dab8", 0x3c, 0x6}, {&(0x7f0000000600)="ee5edfe344126025eddfb114b4d7517a0ec9c3f9c9dcebc23dce66b1cdd329d415e5e05b28cb3b48374d0cfce8dc664966eadb942828c3120b7427dfaad62f14078f5e660680665d3d409bee3a350ab572cc150038555ae2a90cdd0ec328624a36a391abcde37fff24ef85609f96c027f3a1d410505de24e23a09ceb2a78ad6de64d19180b6afe1aad0b9915f632516d59432e07db786e2875b5bc9582a5838695fba6a2d4d1a77b242e809065b943b7ae1e94f84935a1dd3692a0c43259fe66508fdd5acc81e64670c5481976a4603453e1ab82", 0xd4, 0x8}, {&(0x7f0000000700)="1d8ea3986dcb280222278fcc718519b00b7f4081c1666c534b4091a9732ec75ec347d26dc93a962ec37bb5a039ae003b05fd0d6b7d62ca8b521adf439bd28a7671a866375ae14a1640a51af286c859a297", 0x51, 0x7}], 0x8000, &(0x7f0000000840)={[{@umask={'umask', 0x3d, 0x1ff}}], [{@obj_type={'obj_type', 0x3d, 'user\x00'}}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz', 0x2}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x50, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:54 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x5) 16:36:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3040.978895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 16:36:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) write$P9_RLINK(r0, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6(0xa, 0x800, 0x3) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000000000001e07400000000004400000000000000feffffff00000000010000000ab7d6beb617bc0c4e3543e489361af81b8cead66c30c030f62b1bd3cd4453f92f4d183cf1d6535ddbd4d6e2a54133447d24f5f7f945810902a1855eb18fb77ad04287bf3e6c1e4999c32ef77857d38375b7daf1dbc8c89f"]}) ioctl$TIOCCONS(r2, 0x541d) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='f_inet6\x00\x00\x00\x00\x00\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000200)) 16:36:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) rt_sigtimedwait(&(0x7f0000000000)={0x1}, &(0x7f00000000c0), &(0x7f0000000140)={0x77359400}, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:36:55 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @reserved="31519968e747fa8574f2f8ef84913604d98e557d3ab8652ba6c63cfba5beb845"}}) pipe(&(0x7f0000000000)) [ 3041.061284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 16:36:55 executing program 5: socket$inet(0x2, 0x0, 0x81) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x80, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000280)=""/181, 0xb5}], 0x4, &(0x7f0000000380)=""/10, 0xa}, 0x80000100) 16:36:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/187) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:55 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x40, "e537dcdd1c8542d3c2fcbc8d7c154114b2fae93483ad479d2abf3629f370aa027a9c840fc64af0da5c41668f71e390da47ba86c4c11e431afcefb9a97692191b"}, &(0x7f0000000340)=0x64) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f00000000c0)="77ee56a83a") r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x970, 0x400801) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x30b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1034190}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r4, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffb2c6}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xb574a20ef6120b5a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xde5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0xb4}}, 0x40040810) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff05000000000000000000000000000151153865c98f9c070aed76ea8be8"], 0x0) 16:36:55 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 16:36:55 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = getpid() tkill(r2, 0x9) perf_event_open(0x0, r2, 0x104, r0, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd60f6605100880000fe8006437f050dff00000003000088fffe80000000000000000000000000001f0006000000000000072880000001080140000101010000000000ffffffffffffffff00000000000004000100000000000000040100040100000000000000000000020000000000009950899832d319b853710e9159990706860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:36:55 executing program 1: r0 = getpid() socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x15204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='sessionid\x00', 0xfffffffffffffffb) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x804000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x22003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r8, r7, 0x0, 0xc0000008000000b) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6}}, 0x0) open(&(0x7f0000000300)='./file0\x00', 0xd97df792d08763d6, 0x113) syz_open_procfs(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='sessionid\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r9, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xfd82, 0x4000002, 0x0, 0x2ff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) tkill(r0, 0x9) 16:36:55 executing program 5: socket$inet(0x2, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x38a, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x354, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x1fffffffffffffc1, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb7, 0x0, [0x7ff], "49f6d4979a7b526e54346f065d7eb626072b8c522d63079b442eb4978f76981aa03429f02d4dcf11a9dc2ea10ae96caa4af949c0cb5eeb696bfa9dea2f8924baf1adbbfa6d8e747eeb8718f61d3a7ac652e17f3e4224857155dad884ceba98ce5f26ce95ca16b7fc291cc0c037313d04da2dd245cb167fae9ef7862c72e9c68c0853a0f6f7c46e41c6ab061d8e96e9eb3e071d4be92adf128831919bc370b8bddee26673f89631daf28b75b6a1a655c6e2a8dd5bb82b60"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x6, 0x3], "d829c42f3720034b6d9c3fca6ba1701234c5fd94f84161e65984ed7a3408be4565f35e5b6f1d5ffbcbbe22a18b39dd3af0abf446d2adc11c8e22b124920d64a5f27da5ee5b1a68ba33f4738f05b95d04644dd2d614e63fd35ceef67e3aebd5a76391699f17073598599f5b52e1e0d1a8ad3c9288a1024f28cb43cc5e97551a3b10127ed9ad603af85c00b47158f2361d084e5368e4c7e3169f16fbc0bd03c13b21fc61af7b3e533f35e5c786"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "ef07a8d5cc3e2e72be9036b0d8291f20b78a918c556371e8c8bb8e5fc0d89ea25beffd0e710976a2f4f8c58721adf047983ee86b99c84b9a02b20712c2741b093b600bacf174f65167a1fb8fbe38faac68488c160ad4e7956719913fafb767463375ade37950880f8ebbeb26fc07e3451265d915d1ac9d59fac3d2854d2d1394ec2bac9e7edc239e845fec2b6e58d9201bbe157ece7c402d6327c19a028995c833e1f5c5d992fa0f57c82aacb939c608ce9ff0804dcda1b9a53e279d9652824cfa"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0xc4fb}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0x23}, 0x2, 0x80, 0x3, 0x3, 0x4, 0x0, 0x1, 0x2}}, {0x8, 0x6558, 0x4, "f302ed1400916bed16d5e3c13bc45589425234ca1e2720d1c0462c1a7141532ab6eb328cc5dfc381a5bf95ddb272be85eb672cbbbeae0756855a038a09abdabddb077291e4425d853bdfecf3f9ec4c3ebac7973f42feb36030ae945ed9ccf537394515bac26e8a3c703e21ae99336dcec71405e3dea93cbf18a00ae5c037ddbc2a353cefcdcb78c3b6a928bc5ddf"}}}}}}}, 0x0) 16:36:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x19, 0x17, 0x14c}) 16:36:56 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[0x401]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000380)=0x9f1, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10008408}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14020000", @ANYRES16=r6, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000085) 16:36:56 executing program 2: r0 = getpid() tkill(r0, 0x9) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0x19) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:56 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r7, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000240)=0x84) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000400)={r9, 0x7}, 0x8) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 16:36:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x0, 0x200, 0x200}) ioctl$TIOCCONS(r0, 0x541d) 16:36:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) 16:36:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000000)) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r1, 0x0, 0xc0000008000000b) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TIOCCONS(r0, 0x541d) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000080)={0xb51, [[0x7, 0x8, 0x592, 0x5, 0x8, 0x3, 0x3f, 0x2], [0x6, 0x1, 0x0, 0x1, 0x4f560b13, 0x7, 0x7, 0x6], [0x9e0, 0x7ff, 0xfffffffe, 0x1ff, 0xa771, 0x4, 0x5b77, 0x4]], [{0x0, 0x7c, 0x80000001}, {0x4, 0x8, 0x4}, {0x100, 0xb05, 0x6}, {0x8, 0x4, 0x6}, {0xfffff227, 0x81}, {0x6}, {0x1, 0x1000, 0x10000}, {0xff000, 0x1}, {0x3, 0x40}, {0x7, 0x66, 0xfff}, {0x6, 0x1, 0xff}, {0x7, 0x2, 0x7}], 0x800}) 16:36:57 executing program 1: r0 = getpid() tkill(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x18) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x6, 0x70, 0xff, 0xff, 0x2, 0x6, 0x0, 0x5, 0x12694, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc158f77674c2ff91, @perf_bp={&(0x7f0000000480), 0x4}, 0x38, 0xffffffffffffffc0, 0x6614, 0x8, 0x5, 0x983, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000440)={0x20, 0x2, 0x1, 0xfffffffffffffff7, 0x7fffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f0000002a00)=[{&(0x7f0000002940)=""/130, 0x82}], 0x1, 0x2) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0xb00, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000003c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r10, &(0x7f0000000380)=0x4) preadv(r4, &(0x7f0000000300)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000004180)=""/4096, 0x1000}], 0x5, 0x5) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:57 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0x5}, {0x8, 0x1}, 0xdfe9, 0x1, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = getpid() tkill(r1, 0x9) getpgid(r1) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = getpid() tkill(r3, 0x9) getpriority(0x2, r3) 16:36:57 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x70, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@generic={0x80, 0x2b, "7cea53b5b3d8dfd3eb3dc1a3c82bc9e5b88512982754645e882f7148a9ccbcbedf498d1bc240e82327f005"}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = getpid() r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000380)) tkill(r1, 0x9) r3 = syz_open_procfs(r1, &(0x7f0000000100)='net/i\x00\x01\x00\x00\x00\x00\x00\x00s_ma\x98\xbdl4\x96\xdf') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x9, 0x6, 0x15}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xc, 0x1, @link_local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10018001}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40100005200010027bd7000fedbdf251c1dfe0600b30f000008000100", @ANYRES32=r7, @ANYBLOB="08000600ff01080008000600be01000006800400000000000060919226f6d0f5788d11719c264a492fc3080c21cf11dff7d729283a03782675e3167f6d7edc018933da13a738ef58204819e4bba198cb91cfdbb9e820c0a3a746a39c9ad8e205db3ae394ce190df6bc610f00"], 0x3c}, 0x1, 0x0, 0x0, 0x1d}, 0x20048040) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:57 executing program 4: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f00000000c0)=0x9, 0x88) r1 = socket(0x10, 0x800, 0x44) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000379f49533234e61ea36b03b18f40000001b"], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x8001) 16:36:57 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x3, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:36:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x10000, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x80040, 0x0) sendto$inet(r2, &(0x7f0000000300)="54b799c1965e0c6f80fb91e0f5313fada5ba530043a7a0b144d68b70260a66f2a9e0ad4bac4d6826000bd1661491874d45816fa00e8a0888b75a95d5a25e0bdf5456e0aa81266fb073aea382a33976acc372078873e2475761bcebcd77cf4dcd2119f129ac1f993c816d577cd7f47f8c969a30d049e549d4e559f7b8e80c95cf05da9152980578445c61b02b0fad25cdb4da5e75938a671af9a6d45159fcffb296458aa78f441ca8449e5cbebde60ee7a5c3e52b6f39eb", 0xb7, 0x40, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:58 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x18040, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:36:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/92) ioctl$TIOCCONS(r0, 0x541d) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xc0, 0x7, 0xff, "5e685844a636f304c845ddb690187a7c", "7cc16e6485007a616aa589a5ed6793bc57b322856850da1c74d3ca18b526f5232c68438ba8eb869af3aa0de016242354ec1ce0ff8eaf78d1fd5373eebba518b4a79761b1545213c27c52c21e19620837d2a12e1e56e22c9530c99a4c0afc63d8757db7166ede92a62adde345d1a4fb128d32f862e73250dcf1841187c2709e92fb501b800c82566d84d8049733450e21b1e07558d10979b51b2b057da753b919e379438a726a1b7c9f966f"}, 0xc0, 0x2) getcwd(&(0x7f00000001c0)=""/232, 0xe8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000002c0)={{0x0, 0x0, @descriptor="f04bb03fc8ddf6ff"}, 0x45, [], "5e7dff5520442ac8eb55076c7a575af1c93b9dd0d6631864a6e4986f904f9e539ea9c3b692d4a2cb3a6c9676d508985dfd5916aba5e6bd5b3289ebb59b1fe2696969316f6e"}) 16:36:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x2, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x4}, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:58 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x9, 0x0, 0x0, 0xdd35}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:36:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000200)={0x6, 0x3, 0x3, 0xffff}) ioctl$TIOCCONS(r0, 0x541d) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0xa, [@union={0xb, 0x1, 0x0, 0x5, 0x1, 0x7f, [{0xd, 0x3, 0xffffffff}]}, @const={0x3, 0x0, 0x0, 0xa, 0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @enum={0x8, 0x5, 0x0, 0x6, 0x4, [{0x40000007, 0x83240a5}, {0x3, 0x3}, {0x9, 0x81}, {0xd, 0x8}, {0x9, 0xb6be}]}, @enum={0x7, 0xfe}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @struct={0x5, 0x3, 0x0, 0x4, 0x1, 0xab99, [{0x2, 0x4, 0xfffffff8}, {0xe, 0x4, 0x3}, {0x4, 0x0, 0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000140)=""/86, 0x10a, 0x56}, 0x20) fcntl$setflags(r2, 0x2, 0x0) 16:36:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') socket$inet(0x2, 0x800, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x60, 0xd, 0x5, 0x1f, 0xa9, 0x1, &(0x7f0000000080)="4eb212e7a6902ea88da613b78865b25bc641db2d78394a05bd04da3fd859bdaf9a7c92acbc478085718622a834eb36629304926768c2ac38ffeaa7588e9dc4617ad5314fa3d4ac17dfbd044b91690576fce719c22a9a11683f7a8d734b5c1a80bc400320d6a3d94b64f59056627a8970f17df10abe62403dfadf604809c43a2752c63a6df0a256ac60939400a395c96df10b417b05a1ebeeabd010b050812ca3eef4d14b3d45cfe38e"}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = accept4$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x800) getpeername$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0xa, 0x40) sendfile(r4, r2, 0x0, 0xc0000008000000b) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r5, &(0x7f00000017c0), 0x199, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) personality(0x5000002) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, r8, 0x3}, 0xc) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r9, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) preadv(r9, &(0x7f0000000640)=[{&(0x7f0000000540)=""/217, 0xd9}], 0x1, 0x1f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$TIOCCONS(r0, 0x541d) 16:36:58 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x7476}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x4, 0x200, 0x20, r2}, &(0x7f0000000140)=0x10) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000180)={@local, @multicast2}, &(0x7f00000001c0)=0xc) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:36:58 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@broadcast, @random="607c9a2d4373", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x7, 0x1, 0x40, [0x1, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="49040500c3fc0000000000000000"], 0x2c}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400002, 0x0) fgetxattr(r5, &(0x7f0000000300)=@known='system.advise\x00', &(0x7f0000000200)=""/216, 0xd8) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x31b200, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000580)={'broute\x00', 0x0, 0x3, 0xe6, [], 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f0000000480)=""/230}, &(0x7f0000000600)=0x78) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', r4}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000640)={0xe, 0x7, 0x8, 0x8, 0xef, "cbb6e51b93cda3bb73e0aab3adb655027b259b1a21c66f1c90b81fc2fdf3100d739329ec999fbc25d61e159b33c2f259e488d4efe0a63ae77cdd5cb4c0558b9ef6beab8b0974d4aee7d3af089f3925d2ec03d5d23cdbb8bd3b733a13a7eae64eb3acf30e5e1635611c4252ab228ddf0c6877d4df873ef1213b91b9e5306825095e0ee14ad4333440e6ec852763969ca45597609451dbde6faa4400410b350c6e37ef4ba4c18ac6f3cf8cd46ff2440c556ed6aa0dc68f50ba0661aef0b8aae60594b9073dd84571a4a2567c3903ae351e0f136f8976c0ba8e40d34546aadadfec895f5d141741ded84c05b616d17167"}, 0xfb) 16:36:58 executing program 5: socket$inet(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x30b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r3, 0x600, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x7, 0x8, 0x7fffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040094}, 0x10040880) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe8000000000000000000000000000000006000000000000072880000001080140000101000000000000ffffffffffff0a000100000000000400010068721005c8000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff05000000000000000000"], 0x0) 16:36:58 executing program 2: r0 = getpid() tkill(r0, 0x9) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x80000000, 0x200000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2d000, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x40000, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r8 = getpid() sched_setattr(r8, &(0x7f0000000740)={0xffffffffffffff32, 0x2, 0x0, 0x40, 0x5, 0x8001, 0xe1, 0xffffffffe611c577}, 0x0) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000b00)=ANY=[@ANYBLOB="040000000000000006f0ffff00008000000000000000000004000000ebffffff00000000000000000000060000000400000000000000e8ffffff8000000004000000070000000000000000000000000000000000000000000000ff0780000100000000f7ffffffffffff8f000000f7940000c700000000000000000000000000000000000000000000008ab000000400000000000000000000007e00000000000000000700000808000000000000000000000000000000e20065e68fd37e4bf9b19ad30939423a2a4348"]) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0xffffffffffffffd7, 0x2, 0x0, 0x1, 0x5, 0x7fffffff, 0x0, 0xfffffffffffffffd}, 0x0) r11 = syz_open_dev$cec(0x0, 0x2, 0x2) write$selinux_load(r11, &(0x7f0000000dc0)=ANY=[@ANYBLOB="2b6baac785d3df0d23132e9be5a9afe68f76e76769040000000000000000004de0f6aec3936cd0aee14a26dedce5e9922246d419d9f082a8152dd5814ba2423e2c722686d08a9180148f68c9f1f7442d1d1bac9daace50e7543b29c114d48ef317b93892914f1c214c4127b8ef00"/119], 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x227) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r14, 0x0, 0x0) r15 = getpgrp(0x0) waitid(0x0, r15, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r15, 0x9, &(0x7f00000001c0)=""/68) r16 = getpgid(r15) r17 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r17, 0x8904, &(0x7f0000000000)=0x0) r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r20 = openat$cgroup_ro(r19, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r21 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r22 = getpid() r23 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r23, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r24 = gettid() waitid(0x2c7c96e4f825ad55, r24, &(0x7f00000008c0), 0x80000000, &(0x7f0000000940)) r25 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r25, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r26 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r26, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$key(r23, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT=r16, @ANYRES16, @ANYRES16=r16, @ANYPTR, @ANYRESOCT, @ANYRES64], @ANYRESOCT=r25, @ANYRES64=r26, @ANYRES64], @ANYRESDEC=r24]], 0x8}}, 0x20004850) r27 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r27) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r27}, 0x0) kcmp(r27, r27, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r27, 0x0, 0x0) r28 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x6d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r27, r28, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r29}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r22, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r21, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r20, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r18, r17, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r16, r14, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r29}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r13, 0x0, 0x5, &(0x7f0000000080)='em0-\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/loproc(\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r29}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r11, 0x0, 0x1, &(0x7f0000000000)='\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r10, r9, 0x0, 0x1, &(0x7f0000000340)='\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r8, r7, 0x0, 0xd, &(0x7f0000000000)='wlan0-wlan0\\\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r6, 0xffffffffffffffff, 0x0, 0x154, &(0x7f0000000540)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r5, 0x0, 0x1, &(0x7f0000000000)='\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r4, 0x0, 0x9, &(0x7f0000000040)='/dev/sg#\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r2, 0x0, 0x27, &(0x7f0000000100)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='lo}', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000380)='net/if_inet6\x00', r29}, 0x30) perf_event_open(0x0, r30, 0x7, 0xffffffffffffffff, 0x0) r31 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r32 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r32, r31, 0x0, 0xc0000008000000b) r33 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r34 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r34, r33, 0x0, 0xc0000008000000b) r35 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r36 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r36, 0x84, 0x1d, &(0x7f000025e000), 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r35, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r33, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xfffa}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r31, 0x84, 0x1, &(0x7f0000000180)={r37, 0x7, 0x4, 0xffffffff, 0x5, 0x8000}, &(0x7f0000000300)=0x14) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000080)) syz_emit_ethernet(0xbe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) 16:36:58 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000600)=""/239) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 16:36:58 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000300)='user\x00\x1f\xfb,I\x9dhg\xb34\x19\xf8\xdb\xf3a2\xc3\xd2jO\a?\xac\xa7\xa4\x10\xa4\x16\xe4\x93\x8b\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100880000fe8006437f050dff00000003000088fffe80000000000000000000000000001f0006000000000000072880000001080140000101000000000000ffffffffffffffff00000000000004000100000000000000040100040100000000000000000000020000000000009950899832d319b853710e9159990706860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001a21c2c3563b1d0a17946c61f360072917304cbdfc32e41d091c39bfffa9ab59a18c09fb43f58211f1a580d6bd821d1c8b973562270400886"], 0x0) [ 3044.764177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3044.790119] net_ratelimit: 16 callbacks suppressed [ 3044.790124] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.800264] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.805578] protocol 88fb is buggy, dev hsr_slave_0 16:36:58 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x101, 0x8002) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r4, &(0x7f0000000240)=0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e22, @local}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r5, 0x541d) 16:36:58 executing program 1 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3044.810868] protocol 88fb is buggy, dev hsr_slave_1 16:36:58 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_getres(0x3, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:36:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCCONS(r1, 0x541d) [ 3044.950144] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.955477] protocol 88fb is buggy, dev hsr_slave_1 16:36:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000000c0)={'sVz'}, &(0x7f0000000300)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xfffffffffffffffe}, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0x0, 0x5, {0x8}}, 0x18) [ 3045.110138] protocol 88fb is buggy, dev hsr_slave_0 16:36:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=""/151, &(0x7f0000000000)=0x97) 16:36:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = getpid() tkill(r1, 0x9) r2 = getpid() tkill(r2, 0x9) r3 = syz_open_procfs(r2, &(0x7f00000007c0)='\xd3oI:\xbef\x06\xfb)w\xda\xe3\xd7k\x06\x00%K\xab\xf0t\xbc\x84\xee\x82\xe8\x8bK1\xe2\x8d\x93\x18\xa6T\xb0\xc01V\x0f\xb2\xc9\x9cW\xb9\x85:\xa76$\x8a\xa36X+\xab\x82\xaa\x83UBP\v\x01I\xa7\xd9s\xdc\xa8\xb01\x83\x1b\f\x1c\xf0\xf3\x0f\xa6x\xf3)\xa0&\xd0\xb5\xa6\xd7\x05bU\xe7}\b\xcc/\xaf\xd2N\x95\xdb0\x1e\xb3\xff5\x92\x81k$\t\a\xb9\x9e,\xda)\xc9!n\xd6\x1b\x1bdX@\x1c~)P\x05\x9dsPI\bsa\xd6\xbb$\xa6\x92+\fdf*[l\x02\xc8\x1a\x8baa\x89:\x87(\x04 \xf9S') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x19, 0x36, @scatter={0x4, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/52, 0x34}]}, &(0x7f0000000480)="3344c663f07a99e8e38f5e21857c40bec7257f5f6dd515ce52", &(0x7f00000004c0)=""/77, 0x4, 0x10, 0xffffffffffffffff, &(0x7f0000000540)}) 16:36:59 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:36:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7138a4e5e563b274, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x301440, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000000c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) dup3(r3, r4, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 16:36:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x3, 0x4009, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x7, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x20}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:36:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:36:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x121) write$P9_RRENAMEAT(r5, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) ioctl$TIOCEXCL(r4, 0x540c) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x2b8, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x124, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x7, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6a3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x118, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd68}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TCFLSH(r4, 0x540b, 0x0) ioctl$TIOCCONS(r6, 0x541d) [ 3045.590144] protocol 88fb is buggy, dev hsr_slave_0 [ 3045.595277] protocol 88fb is buggy, dev hsr_slave_1 16:36:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000000)={0x0, {0xa4, 0x5}}) 16:36:59 executing program 5: socket$inet(0x2, 0x1, 0x81) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd856}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2008081) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r0, 0x0, 0xc0000008000000b) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0xfffffffffffffff4) 16:36:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:00 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x180) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000000c0)={0xfffffffb, 0x8ac, 0x7fffffff}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000001180)=0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000140)="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") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x7f, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2014, 0x3, 0x80000, 0xf47395ee618645e4, 0x4, 0x0, 0x1}, 0x0, 0x0, r2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3046.390782] protocol 88fb is buggy, dev hsr_slave_0 16:37:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x18000, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) sendto$inet(r0, 0x0, 0xfffffffffffffee9, 0x4000000, 0x0, 0x9bb0ea5508569638) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffa3, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000300)={r3, &(0x7f0000000140)=""/7}) creat(0x0, 0x0) r4 = getpid() tkill(r4, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x4000000000005}, 0x0, 0xffffffffffffffff}, r4, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0xffffffff, 0x6, 0x0, &(0x7f0000000200)}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) splice(0xffffffffffffffff, &(0x7f0000000080)=0x7, r1, &(0x7f0000000040)=0x80000001, 0x7, 0xb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCSIG(r3, 0x40045436, 0x32) 16:37:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x9be4dd508cde7428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0xc46a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x8}, 0xc) dup2(r2, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_setattr(r3, &(0x7f00000000c0)={0x30, 0x0, 0x1, 0x4, 0x7, 0xf31, 0x9, 0x2}, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)={0x7, 0xc001ff}) ioctl$TIOCCONS(r0, 0x541d) 16:37:01 executing program 4: r0 = getpid() tkill(r0, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) tgkill(r0, r3, 0x19) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xe) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000640)=[r5]) fchown(r2, r4, r5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000140)={0x7f, &(0x7f00000000c0)=""/127}) 16:37:01 executing program 5: socket$inet(0x2, 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x400, 0x6c}, &(0x7f0000000040)=0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f00000002c0)={0x78, 0x0, 0x8, {0x2, 0x5, 0x0, {0x4, 0x101, 0x1, 0x8, 0x8, 0x90d6, 0x1, 0x7f, 0x9, 0x8000, 0x3, r1, r2, 0x0, 0x9}}}, 0x78) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f00000003c0)=[0x4, 0x4], 0x2) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio1\x00', 0x42000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x12}, &(0x7f00000000c0)=0x8) 16:37:01 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000000)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() tkill(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='em0\x00', 0xffffffffffffffff}, 0x30) wait4(r2, &(0x7f0000000140), 0x4, &(0x7f0000000180)) r3 = syz_open_procfs(r1, &(0x7f0000000080)='pagemap\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x3, 0x1}, 0x10) sendfile(r4, r3, 0x0, 0xc0000008000000b) bind$x25(r3, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) ioctl$TIOCCONS(r0, 0x541d) 16:37:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xa, 0x80000, 0x81) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x10, r3, 0xf8446000) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$describe(0x6, r5, &(0x7f00000000c0)=""/142, 0x8e) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r5, 0x80000001}}, 0x18) 16:37:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x222000, 0x0) accept4$packet(r0, 0x0, &(0x7f0000000100), 0x80800) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xb}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, 0xffffffff, 0x3f2, 0x9, 0x100, 0x9, 0x40001, r1}) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x104, 0x3, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xae50}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) fcntl$setsig(r2, 0xa, 0x15) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x2761, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)) 16:37:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={r2, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080)}, 0x408, 0x0, 0x7ff, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:02 executing program 5: socket$inet(0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x6, 0x934, [0x0, 0x20000400, 0x20000644, 0x200007fa], 0x0, &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x9ac) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x1a78fee9b6f4bc92, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200000, 0x0) r3 = dup(r2) write$tun(r3, &(0x7f0000001d40)=ANY=[@ANYBLOB="0000dada000008000000000000000000000004000000000000000000000000000000000000000000000000000000c858355e06000b7a202f01fe23e0374b309b1ffdafb28440f020174f25831b0a30dce78fcb7cc8f44ec65c462956e0e5c4be05b3a0531f9c92097c3730bc10df7a2fc2582d0a1df01307202b1100010000f86c4991e8bf5d854384c23fd4fa282ce4046d31b38ec5a10bf2c29ee3a6caeb518458e22ba1ba6971a25c388c823695d7016a63081f5f8d7cfd24902d72d8ecef845226654bc68d"], 0x5e) write$UHID_CREATE(r2, &(0x7f0000000180)={0x0, 'syz1\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\a\x00', 'syz1\x00', &(0x7f0000000d40)=""/4096, 0x1000, 0x7f, 0x8000, 0x1000, 0x6, 0xffffffff}, 0x120) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$SIOCNRDECOBS(r4, 0x89e2) 16:37:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x17, 0x1, 0x74, &(0x7f0000ffe000/0x2000)=nil, 0x2b}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x9) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:02 executing program 0: prctl$PR_SVE_GET_VL(0x33, 0x786e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000640)=[r4]) write$FUSE_ENTRY(r1, &(0x7f0000000080)={0xfffffd98, 0x0, 0x8, {0x2, 0x2, 0x7, 0x7fffffff, 0x5, 0x9, {0x6, 0x0, 0x6, 0x2, 0x20, 0x40, 0x7f, 0xffff, 0x10001, 0x7fffffff, 0x0, r3, r4, 0x2, 0x101}}}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x482000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$KDDISABIO(r5, 0x4b37) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x3) ioctl$TIOCCONS(r0, 0x541d) 16:37:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) geteuid() ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0x0, 0x10001, {0x56, 0x0, 0x7, {0x81, 0x800}, {0x5}, @const={0x2, {0x1, 0xffff, 0x9f, 0x4}}}, {0x57, 0x1f, 0x7, {0x7, 0x800}, {0x1f, 0x40}, @ramp={0x9, 0x7f, {0x0, 0x9, 0xff, 0x99}}}}) 16:37:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000300)={0x11e, 0x7d, 0x1, {0x0, 0x117, 0x541, 0xffff, {0x2, 0x4}, 0x82100000, 0x8, 0x40, 0xc85, 0x6, 'GPL&#%', 0xc, '/\x02roup.stap\x00', 0xc6, '%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xc, '/\x02roup.stap\x00'}}, 0x11e) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x400000000000095, 0x61791381b0d3ab78, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 16:37:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCONS(r0, 0x541d) 16:37:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = getpid() timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x4, @thr={&(0x7f0000000300)="4345cdb4d6037213b3bbce9fa6579aee07d771e67d5c7e0bfba065dcb9142948dfeec0017e6f57bdd3024058f9db16361dedd238f4c2bdebf0421a3c32650a5d4100fff8d855f8ac2fb5f6afa2b49b3b3ff26527f57ba2dc1502749f5ae92d25e74248b0a247d96775316676bfab0f44a181b94d940b0f30d0ace872248245ec6aac0a7f0c03078e753eb81a15dbbecb9dda4237", &(0x7f00000003c0)="62372440e0aebc1aa431ef2b9b2a4555da3eb3f2e7f3b9aacede06c897624cf7a1c54fc84f9f7d72d7e35c35c7a50c1963b66885a86162d30878b644ae28abb225ec61a51b39dcde80f84b95acd22c175a520f188fa295b1d694bdc5798e6c47acd8f9f86e51a0f0d9d77e96ce6823b7dd46d584aa7bb5fced4289818a69457bb20878a0b156b5f7638382ce13387df942d64042aef0a231ca5f5fb64f7dd31561a2057b3ab7dc2f1b018fa6194db8ee1cf70496adf1f5266dd7405f56a634815e686e8a68882e669aea1f1276d0e5e86a"}}, &(0x7f0000000140)) tkill(r1, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='oom_\xb7\xbd\xaa\x88|(j\x13f;^z!\xa1\xac!') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, 0x9, 0x800, 0xb5e, 0xdfe8, 0x5cdde71a047c9d82}) 16:37:03 executing program 5: socket$inet(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030084dd6076605100680000fe8006437f050dff0000000300008866dc82010d4213664b6ffffe8000000000000000000000000000000006000000000000072880000001080140000101000000000000ffffffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000300)={'sit0\x00', 0x2, 0x3}) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:03 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x34001, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) r3 = getpid() tkill(r3, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) accept4$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x800) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:03 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/189, 0xbd) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:04 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000020c}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x907, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000050}, 0x4024410) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 16:37:04 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0, 0x0, r2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1010) 16:37:04 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) mq_timedsend(r2, &(0x7f0000000300)="af525c3d2717c783087b201eb44ba0d9f6c970b5e807d9e94e1db0e64147dc253089afbca3f454ee7da33ae6eda6fa7d546651843810956542a27d733913b5057dd05c28ced68a716e5581a9751d275a68620049123b42a013a3e513b748991ad9874d1af71fc060aa52b5d39e30615bb2037b97d3d0db4d32b35234ba507a573d497540ca3b8c5734f79d880c8350639f97337e3f1e2ec7b377cd15497050d1f90776ff219e59b51d0f16f501c03e06b7bc8db0dbe7420ebd16fd41812d67e292583bc6017c50b2725f1151147ca8101d7cec2992f9d8300e83056dfd7fd721f058f9ad517d8ca076ef56", 0xeb, 0x2, &(0x7f0000000400)={0x0, 0x989680}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'veth0_to_hsr\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) ioctl$USBDEVFS_RESET(r6, 0x5514) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x22400, 0x0) execveat(r8, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='\'usersecurity\\\x00', &(0x7f0000000140)='(\x00'], &(0x7f0000000240)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)=',keyring!ppp1md5sumem0vboxnet1GPL\x00'], 0x1000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) write$USERIO_CMD_REGISTER(r8, &(0x7f0000000280)={0x0, 0x80}, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @remote, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3050.550115] net_ratelimit: 21 callbacks suppressed [ 3050.550121] protocol 88fb is buggy, dev hsr_slave_0 [ 3050.560276] protocol 88fb is buggy, dev hsr_slave_1 16:37:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000002100)=""/4087) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000001040)={0x4, 0xffff0001, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r9, r8, 0x0, 0xc0000008000000b) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001340)={0xffffffffffffffff}, 0x65, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f00000013c0)={0x10, 0x30, 0xfa00, {&(0x7f0000001300), 0x3, {0xa, 0x4e22, 0x7, @loopback, 0xcb6}, r10}}, 0x38) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/4096) r11 = socket(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r12, 0x30b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x10c, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd84}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x17e0879e}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x20008004) r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001080)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r13, 0x80dc5521, &(0x7f00000010c0)=""/53) ioctl$TIOCCONS(r0, 0x541d) 16:37:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) r2 = getpid() tkill(r2, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, r2, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 16:37:04 executing program 5: socket$inet(0x2, 0x0, 0x4) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1f000000, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="031700000000000008000a00", @ANYRES32=0x6, @ANYBLOB="600012000c000100697036746e6c00005000020014000300fffdffffffffffffff0000000000000108000800390000001400ecffffffffffffff000000000000000000011400020000000000368e0000ff0700000000000000010800090029000000a3065cddb00b3ad5969ff6c4167fa87a5c35"], 0x88}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x628, 0xa, &(0x7f00000009c0)=[{&(0x7f00000003c0)="037bf18ee4acedae6675715f931216904f56d863e262cd9e50c037e5bd721f11178af5c265f0d6d004da9d54c0a26072fb6cd104148428b52149c9160c26dae94da8e14b6653f7f785b53dade6e0a80dbb652bd3866ac5dc3821668de6e88b4a495595e06ddbaa3771414b2a0863f845b303889fa54b1a1c3f91af5aade945182db13b0265b42015be7fb4f7eb6324e6c243e1f419f1c3ea8093d582c068238ec4816fd7ef35d2be17f2d0729d40568aa2588d85fb027eae5b98f5251c23d1271c37ab11592e098563e8c096c667f91471e938027750c8d4c84f642dbea7b9342fe423253761bb0ddeadb6a6c11cfde80432735352847c", 0xf7, 0x10001}, {&(0x7f0000000100)="d5c402f8c62c580e0cdbd63f92a4f063d2471bb58ed64c26b7d3c6b6364b735e774813e49759b6dd80761428759d487ecd67a975964b2cb179119ca87ae77e168e7e53f557a092df3175b29554040129853c28203f787c2297929b9267fa9efc11c4996283a9aad7", 0x68, 0x9}, {&(0x7f0000000500)="554fbd70d0bb9309894e6a7dfb21599317b700acd4ac0ea28799e80552203713836ae9bde8888525", 0x28, 0x7d03}, {&(0x7f0000000540)="bb68c2abb203242d7c6ca63defd05293124272eaa87e7e05f6b19531adc420441febf584f92cb40ae2c80eb681", 0x2d, 0x2}, {&(0x7f0000000580)="207af33d4c518891678b8b9a96a3f6dd0b3f56c4775b54486519fd8600f02960522d8105cace9252d2733fd783881a053d6ea6b7728c92deb351dfa1c21600c1a1a70fc63df1b96bb638a48718850ab5b7dd8f20bddedd08c3e1e0f9a335bb5e33730348f90dd2df92c1cbac4fb29a304a911b75fd151173cf5df6e0a4801c9df644a39086c5f8a5fb05a477cb0ccc2c26e39709f12fa47d8bee52e9287bc45047fa973ff7c418ceec3fdf4580d6c192640e63ecbe3d9e81cb8f838905c059d4c3c3d063fe1279fa20602c4c34243c807dab147b3e4f4c5b438229d40041d38888ea258bba635431873925e8747f1d1c", 0xf0, 0xb115}, {&(0x7f0000000680)="a8e4c53710a038bd636590b154cfaecdb09a99e77706dffaa73437b4ad772acf6c8eaf95b9c88cd22c4637c477d72a9b6c5def25fc1f6a205178680fe9dd74cbcd5d7f8a98b498069cdd8fb06305d0898bb21c450946058fd05c0459b27f2821dd8a90d6d38a7f2cf34d7b85973df3c5041eda96766b1120b9eebb2acfc896f43e00a2361760d42baffbe7dcdddba422f8d86bac75ab032079d0196ae808ce4cbf2d5ae31952deb65ebf287a17dc033765cdbfd57b2ec870ac676d62614cb9a689ba1621ed43dd20", 0xc8, 0x2}, {&(0x7f0000000780)="0dd77f5c61ebb4f43983f952177b24a59d546c739db8a2143daf0da64aeb575446c33684ea7d5f90fc2d31693e7c87d7f795b8301327a670843cc45157a8a52d61747c90d3d9973a20c3b685c7c4d739988b99221f0dd64370", 0x59, 0x9d6}, {&(0x7f0000000800)="515b47bdecb94f98ec74b44729bdadaed0d9ce7a9d6f16020e99bcadfdb8eab8530384c568a3e964ec4531807b67bcbe0a0d65843942dc21e495c13e0bc3b880806ee112e043a44ea2c4ebb13a79c5f4473be8a4ed17eb88800dfc43076e77c71aa87485068c9e3c8dc6902ebb46e40fd92c4d1cbbc95d6b89852121ad56644537109bf6e1fe733c9d303ef9bdfcda9b891d08ef31106ab93a4cf4221765f63c55466c7e5f531d15a6abf37a8e39b2579bf957305785c049f1f81280c81d696139a0c49c3a1d2fdfb223d5daaa3e6e3efbd43277f7", 0xd5, 0xf15}, {&(0x7f0000000900), 0x0, 0x6}, {&(0x7f0000000940)="427a62d3233729b66734d665979d679e1fd52f80e7250385ccafd5a39cb8ebbeafb26043b1fd9bf559cca8d9e332e37774b2ec1efced6d12322dccedfbe83a67a015179c0f1e75a59cafef63a4bd82cb0879164015df4d2b0156a68113", 0x5d, 0x10000}], 0x1000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='data=journal,max_batch_time=0x0000000000000001,nomblk_io_submit,noblock_validity,nobh,fowner<', @ANYRESDEC=r3, @ANYBLOB=',appraise,smackfsroot=,euid>', @ANYRESDEC=r5, @ANYBLOB='\x00\x00']) syz_emit_ethernet(0x7, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYBLOB="76c1fd83000000808a8e602555e3d9f9ccc276", @ANYRES64=r0, @ANYBLOB="7ecd0e471d87d3321ac2b16aca6c86d084c51c53869871fb040521a67fd369ce95257f5c4b7f276af8ede137b1aaecb7fba2a57ff7442bc33231b134455b19018bee9abfdc634c7f3b5fa1f74ca6e673ade7befbc4d4909262b675a1a3dc3fe44604ef90de3d24527f0fb825746a7b56958a352a88fe4e636fede421a6a0ff32c8b62912df82918e12db44a0c4fff29f39086c5145d7b76048e6f9bc0c33775310e12654f090e0d55ebb501f80d3e53bdba90dc20a2627dbb51c82e724528b0db77b5469cb3ef7db4e9cef803ef411282aa00de654b914be5303", @ANYRES16, @ANYBLOB="e53f21f440ca05741b3adb262ddf17f83caff650301f724ca84c0c68566c7da874a3c5892a3d51bc0cad8520703e27d2e8b7bb4b629fc26a7786ce92c04039ace996247c87adc3cf90d29bfa72acbfee04e022946d6d95a2c75d7088f7ae05ae4ad3e89a5d4b4e7afc874696f1716dd96390f2cb00917629ad6af365ba7781fb27f6278abe60c9571bcc0429f17273271d18ec91b57656d35015c6b3b8f2762ed7f70df4eb8577ccfe1407fa754e01b9621b79d8124740b5d06a5427e0906969ea1727d2786e81815a21d6c6d9bd25c783f8aa69f5794ddfe8", @ANYRESHEX], 0x0) 16:37:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x4, 0x5) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000), 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000000), 0x4) r7 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES64=r6]], 0x8) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x147, &(0x7f0000000780)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x111, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0xc, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @calipso={0x7, 0x30, {0x7, 0xa, 0x1e, 0x7d9c, [0x80, 0x9, 0x4, 0x5d, 0x0]}}, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @tcp={{0x4e20, 0x4e21, r2, r8, 0x1, 0x0, 0x5, 0x20, 0xca, 0x0, 0x4}, {"51881f58a54168709f8fb7d1ad65114ad05d93cdad7fe666c724ec01850671e60f6573bd8f3eda314ff4896fc71006820a313586f2508b85563c5525157a3c625dd168f5b9cb0d83b587883c1faf473dd7ea3e89d9e7b0254f7aa7f55dfcefb25a343ddb8db0cb554df74260ca0852f44b7cea95fc"}}}}}}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r10, r9, 0x0, 0xc0000008000000b) setsockopt$packet_int(r9, 0x107, 0x2b, &(0x7f0000000080)=0x1f, 0x4) 16:37:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000100)=""/112) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3050.823812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3050.876728] device ip6tnl1 entered promiscuous mode 16:37:05 executing program 3: r0 = dup(0xffffffffffffffff) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=@fragment={0x3c, 0x0, 0x2, 0x1, 0x0, 0x2, 0x66}, 0x8) syz_emit_ethernet(0x9e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0180c689030086dd6076605100680000fe8006437f050dff0000000300008800fe800000000071eee274480000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020083c5961e0000000018010200000000001803007605000001ff0500"/148], 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004340), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004600)={0xffffffffffffffff, 0xc0, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400), 0x0, 0x0, 0x0, &(0x7f0000004440)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000004480)={0x3, 0x9, 0x80000000, 0xdc}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x19, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0xce, &(0x7f0000001780)=""/206, 0x40f00, 0x0, [], 0x0, 0x17, r1, 0x8, &(0x7f0000004380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000043c0)={0x1, 0xe, 0x0, 0xd3de}, 0x10, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xa, 0xe8, 0x200}, 0x10, r2}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r2, 0x4) socketpair(0x3, 0xa, 0xa8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x4) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180), 0x10) r6 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x200) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r8, r7, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_START(r7, 0x4142, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) accept$alg(r4, 0x0, 0x0) 16:37:05 executing program 5: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x10}, 0x1}, @in6={0xa, 0x4e21, 0x0, @remote, 0x6}, @in={0x2, 0x4e23, @local}], 0x78) r0 = socket$inet(0x2, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="32f4992acbc4"}, 0x16, {0x2, 0x4e21, @loopback}, 'gretap0\x00'}) ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000001c0)=0x80000000) r2 = dup(r0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000280)={0xffffffff, 0x33}) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088ff970000000000000000000000000000000006000000000000072880000001080140000101000000000000ffffffffffffffff00000000000004fc0000000000000000040100040100860090780007020060ffff000000000000010200000000001803007605000001ff050000000000000000000000000001fa76f8d9fb671d5b7151a1d52e65441e8489e9319c605d4a23ed8ceb945e27f0dcbe4a00000000000000"], 0x0) [ 3051.030155] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.035340] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.040519] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.045581] protocol 88fb is buggy, dev hsr_slave_1 16:37:05 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) [ 3051.190131] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.195298] protocol 88fb is buggy, dev hsr_slave_1 16:37:05 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e24, @broadcast}}) 16:37:05 executing program 5: socket$inet(0x2, 0x5, 0x10) 16:37:05 executing program 4: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)="149a8ce588d8174003d3d81451c30d6ef12b1f24041dffa848781df13e3c1fdb09a7ec0521aa531ccb606e7f7a75c1307678dee79e4fb1925668e5bb52eb2941bf38e59bb2957fce5f5a3a7f1b30a1956bb440635cb8ad9e514b86bdce0d014a53a6f692ae751fdc2abcf22cc9b8aec80d44b25c8849e7d3791c594d968fbf2c278acdc2c6603d6b4613a7832a3f4c55cf1bc80978ce5192f79d", 0x9a}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 3051.350110] protocol 88fb is buggy, dev hsr_slave_0 16:37:05 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00') syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1e26c3f81a06f966329705642c1eca8a5634c1b4f4cda03df8671be1c13616550fda1a893511976664b6d08d49d5581faa1f8ea4ddaf18b8172aafd42ab17a94ac11c421c08d039cd2f914860c8f4645cb0b065725f5b8930f1b1ea6ae577968dbaf00f150bcb89b068e7b526732bcebcc320bf7f3e1a5b75ff1d370036c0e2951dec90ceffc33b563d3ebbb3245e8fa92c28c29591f11ac40079a62ca7df05c3cf0b6c2c571b31e9241e19b1b7cc665"], 0x0) 16:37:05 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe8000000000000000000000000000000006000000000000072880000001080140000101000000000000ffffffffffffffff00000000000004000100000000000000040100040100860090780007020072069c8e60c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:05 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r1 = getuid() ioprio_get$uid(0x3, r1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'sy0\xa2G`\x00', @random="14e260e94eab"}) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000140)=0x2, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) tee(r4, r7, 0x9, 0x1) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000040)={0x281, 0x4}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x8, 0x7fff, 0x6, 0xc4f}) 16:37:05 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605ff050000000000000000000000000001000000"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/184) 16:37:05 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x7dd, 0xffff, 0x0, 0x2, 0x8, 0x3f, 0x1, 0x8, 0x0}, &(0x7f0000000240)=0xfffffffffffffd1a) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r6, 0x92, "76989d059653acc71f8b45ca5d461a82b2b549ee33b9d4b04407915f8c4c40c9fe69031d86f014354d6a636571349f976d0d2ac12f52cefa0198dd37c364a4e17049d4cca9e0727167ed9dcf850579b36449e52580acdd3591b8f5e361153bd663bfe6ef3be3cbb5f86ffd5f50ca24397426bce077fcc45829f9e502ca46b506bcb18a08f7a91e9e86b464b92aaf8e349b21"}, &(0x7f00000001c0)=0x9a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0xfffa, 0x2, 0x5, 0x9}, 0x10) 16:37:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendfile(r2, r1, 0x0, 0xc0000008000000b) r5 = accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) [ 3051.830133] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.998998] QAT: Invalid ioctl 16:37:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = socket$inet(0x2, 0x1, 0x3) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) process_vm_writev(r3, &(0x7f0000000640)=[{&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000580)=""/168, 0xa8}], 0x6, &(0x7f00000028c0)=[{&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000140)}, {&(0x7f0000000780)=""/196, 0xc4}], 0x4, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) pread64(r4, &(0x7f0000002900)=""/204, 0xcc, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) 16:37:06 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100300000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket(0x11, 0x0, 0x1) r1 = getuid() r2 = getpid() tkill(r2, 0x9) capget(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000000080)={0x10d20b81, 0x2, 0x1, 0x4, 0x6, 0x8}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @bcast, r1}) 16:37:06 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x80, 0x5e, 0x0, @ipv4={[], [], @remote}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x5, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}, [@routing={0x2, 0x2, 0x0, 0x0, 0x0, [@remote]}]}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 16:37:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x1}, @in6={0xa, 0x4e21, 0x2, @empty, 0x7fff}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x299, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}, @in={0x2, 0x4e20, @rand_addr=0xb77}, @in={0x2, 0x4e21, @rand_addr=0x5cc2}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x17}, 0x1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xa4) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3, 0x7}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x20000000000001c7, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:06 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockopt$nfc_llcp(r4, 0x118, 0x83a85fd47fd3ff89, &(0x7f0000000200)=""/6, 0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') semget$private(0x0, 0x3, 0x0) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x5, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYPTR, @ANYRESOCT=0x0], @ANYRES64=r0, @ANYRES32=r3, @ANYRESHEX, @ANYRES32=r6, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES64=r7, @ANYRESDEC=r0, @ANYRES64=r8, @ANYRES32], @ANYRES32], @ANYRESOCT, @ANYRES64=r9, @ANYRES32], 0x0) 16:37:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000400)={{0x9, 0x0, 0x401, 0x63, 'syz0\x00'}, 0x1, [0x1, 0xba3, 0x100000001, 0x70, 0x3, 0x3370, 0x80000000, 0x5, 0x1ff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x7, 0x9, 0x5, 0x7f, 0x3, 0x400, 0x4, 0xfffffffffffffffc, 0x33f, 0x9, 0x3, 0x1, 0xfffffffffffffff8, 0xf8b2, 0x8, 0xffffffffffffed95, 0x1, 0x2, 0x3, 0x9, 0x100, 0x1, 0x100, 0x5, 0x10001, 0x77a, 0xfffffffffffffa24, 0x40, 0x40, 0x6, 0x3f, 0x4, 0x6, 0x101, 0xdac, 0x400003, 0x43, 0x5, 0xffffffff, 0x37, 0x7a, 0x6cc26868, 0x1d, 0x8000, 0x2, 0x7, 0x4, 0x9, 0x8, 0x10001, 0x800, 0x8, 0x6, 0x1, 0x200, 0xffffffffffffffff, 0x5, 0x9, 0x8, 0xfffffffffffffffa, 0x3, 0x1000, 0x9, 0xfffffffffeffffc5, 0xff, 0x8, 0x100, 0x0, 0x1, 0x667, 0x80000000, 0x5, 0x1, 0xfff, 0x8, 0x7, 0x100000001, 0x7, 0x0, 0x4, 0xfff, 0x6, 0x6, 0x51e9, 0x7, 0x400, 0x5, 0x1ff, 0x8001, 0x0, 0x2, 0x5, 0x0, 0x6, 0x80000000, 0x0, 0x4, 0x9, 0x7, 0x7, 0x100000001, 0x1, 0xde0, 0x3, 0x6, 0xfffffffffffffffe, 0x8, 0x0, 0x3, 0x80000001, 0x8, 0x80000000, 0x4, 0x8], {r1, r2+30000000}}) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) [ 3052.750880] QAT: Invalid ioctl 16:37:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xd2}, {0x6, 0xc1}, 0x9, 0x2, 0x4c}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) 16:37:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x324d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x7, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:06 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:06 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0) 16:37:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$RTC_UIE_ON(r0, 0x7003) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet(0x2, 0x800, 0x1f) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000002cc0)={@empty, @initdev, 0x0}, &(0x7f0000002d00)=0xc) r7 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r7, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000002d40)={0x0, @empty, @loopback}, &(0x7f0000002d80)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000003100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80008}, 0xc, &(0x7f00000030c0)={&(0x7f0000002dc0)={0x2e0, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x50ee}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x248, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x0, 0x2, 0xe4, 0x9}, {0x9, 0x7, 0x8, 0x7ff}, {0x7, 0x4, 0x5, 0x5}, {0x0, 0x80, 0xfa, 0x1}, {0x1f, 0x2, 0x0, 0x8000}, {0x8, 0x3, 0x7, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0x40, 0x1, 0x9}]}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40028}, 0x40000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r9, r4, 0x0, 0xc0000008000000b) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000300)={{0x4, @name="28247f136cb5245074cb36d4d5d615bd6b4f11bf8c6be4f884f51d5b907ee160"}, "1ffc2b6eeaa3181d9ec37bb9459290c18105f3d7b59fc846beb47a0208bd6c59", 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:07 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 16:37:07 executing program 5: eventfd(0x10c) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0xab56e7e6d0e35b5b, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000180)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3, 0xc}, [], {@llc={0x4, {@llc={0xdc, 0xc, "4a92", "c4fe29d37c8764621c5f1b97c0b8e3f7ee8a874ca0e3bdf59b67d7b8322b31a2d9c864a0b8bc0f97fa7891407f33bc478712d0d414119a230101059cb639b9f1bace5a39d6f76ec737ccf094f8b57516f9b57abe7bb927d6186e21c069fdc0f7b0995867290e721d909b6d26d6ab6fde0c3aac85cc741f096669883e8215f13b609bf1902fe7f7b27dec78b1121b33ca9e6bb7000bfb3883eec09488998256f74847eb55b14db780209d564f96d892aceccfeb5d5a601161f4aa5f619315624f8369c3a9de0a2e86fb15d9f084f15b9630636aac68099f20f8e820203d8afff3f87a1b3b4da4e155c3389e7f3a69626bc64509877d7b1220"}}}}}, 0x0) 16:37:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_mreq(r3, 0x0, 0x23, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) setpgid(r1, r4) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/pr\x04\x00\x00\x00elf/\x057\a\x00\x00\x00\x0f\xf6\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/DeY/fRse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 16:37:07 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff08000180c289030086dd6076605100680000fe8006437f050dff00150003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff0500000000000000000000000000ce0501"], 0x0) exit(0x0) 16:37:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "74e1b797c0f443353dd0c4cb9b18dd1b"}, 0x11, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) r4 = accept4$alg(r2, 0x0, 0x0, 0x800) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x4, 0xbe, &(0x7f0000000100)="e332d01c4b3ee23ed6f5c2ea42ebd1295b6eaf06f075ab447e9e8da4400c742a239c0a2b795d1219bfc9540f10ff6abdee0ad4d34c0f5a8603801ce055de5133de74dfbfa9a9999f294c8754421c93cdfa4388bd829e6eaf5edcef06216b13bc11843635ddeb200dd9e294b5018971508e345a5fcfdadde562133c2d51db6192b09aec73862bbd853eeb4a7244ca2cc9a0aca066fdfe7b9d7b9c954e0c195dd134abc0d6c2197e8f8d95e9b19d547d489ca5a9d887a53af43bcf0ca3205e"}) dup3(r4, 0xffffffffffffffff, 0x100000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) 16:37:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x202000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:08 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000d0a3010000000000000000540000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000108000000000000010000800000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000088000"/192]) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0x6a65bc0f1b6c398b, 0x70bd2b, 0x0, {}, [""]}, 0x14}}, 0x100) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0xf3a2b8175af71a46) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0x4, &(0x7f0000000180)={&(0x7f0000000440)={0x1f1, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0xffffffffffffffc2}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800e9808}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x890) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000030d0390800"/20, @ANYRES32=r11, @ANYBLOB="00000000000000000c0001000180c20000000000"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', r11}) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r14, r13, 0x0, 0xc0000008000000b) getpeername$packet(r13, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) r16 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup(r17) getsockname$packet(r18, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000663d2fe12c000000", @ANYRES32=r19, @ANYBLOB="00000000000000000c0001000180c20000000000"], 0x2c}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup(r21) getsockname$packet(r22, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r23}, [@IFLA_ADDRESS={0xc, 0x1, @link_local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@mpls_getroute={0xcc, 0x1a, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0xafb9f3a9ea991d6f, 0x0, 0xff, 0x3, 0xff, 0xb2c7531828f77904, 0x200}, [@RTA_OIF={0x8, 0x4, r12}, @RTA_OIF={0x8, 0x4, r15}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_NEWDST={0x84, 0x13, [{0x7, 0x0, 0x1}, {0x1}, {0x8, 0x0, 0x1}, {0xf9bb}, {0x2, 0x0, 0x1}, {0x96, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x7}, {0x81, 0x0, 0x1}, {0x1}, {0xffff}, {0x800, 0x0, 0x1}, {0x8}, {0x4}, {0x1}, {0x3f, 0x0, 0x1}, {0x5}, {0x6}, {0x7}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4}, {0x401, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x2}, {0x5}, {0x6}, {0x6, 0x0, 0x1}, {0xab93d}, {}, {0xffffe}]}, @RTA_MULTIPATH={0xc, 0x9, {0xfff8, 0x0, 0x6, r19}}, @RTA_OIF={0x8, 0x4, r23}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x8801) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:08 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) sendfile(r3, r1, 0x0, 0xc0000008000000b) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x40, 0x1, 0x3, {r4, r5+30000000}, 0xdd75, 0x7}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)={0x1, 0x7, [@remote, @remote, @broadcast, @empty, @random='z8$e\\}', @broadcast, @local]}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() tkill(r1, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) sched_setparam(r1, &(0x7f0000000000)) ioctl$TIOCCONS(r0, 0x541d) 16:37:08 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = dup(r0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"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"}) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x400000000000059, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a4ef136, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:08 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000000400)={@broadcast, @empty, [], {@x25={0x805, {0x0, 0x33, 0xfd, "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"}}}}, 0x0) 16:37:08 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x8, &(0x7f00000015c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES16=r2]], @ANYRES32, @ANYRES16, @ANYRESHEX=r3, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYPTR64, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYPTR, @ANYBLOB="ab141af6118bc424e7ac1a17a5fdf62398db8a786f4f4686e17d1c10cffd9916568a5987361800e12072e0feced983728506a399f53b1fb4a505313bae5087fefef0dddcdb9768854d1dbca47dc6b8dbdfa099dafdf361b6a2f7dce8db7eb76eb41ea8beb53075a22ee9b673008d8071242d87adfb137247102b57960654dfa26c96ef1ff49ed6d4141f786790ac19f3833c6cdf1fa6c20fc27576242f1bbcda14596b221cbc54c0f7eac7a60409037c11bff5df1f01e2e2ce00da5ae7f3c4e9e95de1d62bfee238c5a4dd2b6971d253df52e9047d2de8267a50e6fa64bd2cd001d0799cf9746b"], @ANYRESHEX, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYBLOB="bbcafcf153bd3f3fb963da064352155255b8c0691f29a54d9bb80729a915e899002330fcf97d32217c83e127a521fb696508a92d19a560db06a177ddbcb7ce30d201b7fb0a4092fd78f343003d4d17902899c6b433416ee3313c3ff358a082c6b357105eac0a4cd8f4adebdb1a56fbd99ae68b170c7913911248f7634e66fc2f33c984c1292d87a58439d094acd168d921bb8fb987a58efefe93ae32d255f6feef43a911157e0dfbd15f55cc71c829e01b398ac5f03cc31b038b724ab11517ac3eb7117c8e", @ANYPTR, @ANYRESDEC=0x0, @ANYRES32=r4]], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESOCT=r3], @ANYRESOCT, @ANYPTR64, @ANYRES64], @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYPTR64=&(0x7f0000001500)=ANY=[@ANYRESOCT=r6, @ANYRES64=r2, @ANYRES64, @ANYPTR64, @ANYPTR, @ANYRES16=r7, @ANYRES16, @ANYBLOB="db375ac2209ccdc7a78caaa15b87e16a8d1903a7804be4d4759819dc", @ANYRES64=r2, @ANYRESOCT]], @ANYRES32=r8], 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x83, 0x15, 0x5, 0x20, 0x1000, 0x9, &(0x7f0000000400)="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"}) 16:37:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @dev={0xfe, 0x80, [], 0xb}, @mcast1, 0x10000, 0x2d, 0x200, 0x100, 0x0, 0x1, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r3, 0x541d) 16:37:08 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x40000000}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x90) 16:37:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x7, 0x9]}, &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x4}}, 0x0, 0xea2, 0x8, 0x1ff, 0x3}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000500)=""/96, 0x60}], 0x7a, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd85}, 0x0, 0x0, r5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nvme-fabrics\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x2800, 0x0) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:08 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x5) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x50, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@fragment={0x5e, 0x0, 0x0, 0x1, 0x0, 0x15, 0x66}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:08 executing program 3: syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) 16:37:08 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$smack_xattr_label(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000140)={'/selfselinuxproc+}^'}, 0x14, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000180)=0xffff, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) 16:37:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r3, 0x1}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0xb, 0x2, {0x4}}, 0x18) 16:37:09 executing program 2: r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) tkill(r0, 0x9) r3 = getpid() tkill(r3, 0x9) r4 = fanotify_init(0x8, 0x40000) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x80000, 0x0) kcmp(r0, r3, 0x4, r4, r5) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0xa0882, 0x0) recvfrom$rxrpc(r6, &(0x7f00000000c0)=""/24, 0x18, 0x8040, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x12, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000300)={0x2, @raw_data="90f091cf5aa9c9520337fb3014b4063da32d069ef507180a0374fd6547d9df56ec3c01b114df33878b7f7ef5956aabbd5e242a999fc2539e5a0cb94062a98a848965e7d0e7dda215af049d270628fe5309558ed83166daf0259e003d1d788c2935b0778e9a151b02684c503504b63ba4c6464866e91097a1b31938b30606d74e92802b46518f9cffb079be02818a8bec5c2cd24b811e4f13c712d1a2e53a65c77afe1543b6050610aa37248b31d22b2ab766a6b2a7bd56560b759949177f96081564b45e8c082898"}) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:09 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) sendfile(r0, r1, &(0x7f0000000040)=0x40, 0x100000000) 16:37:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8008000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRKP(r2, 0x5425, 0xed) ioctl$TIOCCONS(r2, 0x541d) 16:37:09 executing program 5: socket$inet(0x2, 0x803, 0x23) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffffffdff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe8000000000000000000000000000000006000000000000072880000001080140000101000000000000ffffffffffffffff00000000000004000100000000860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:09 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x5, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r1], @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0, @ANYPTR], @ANYRESHEX], @ANYRES64=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR]], 0x0) pipe(&(0x7f0000000200)) 16:37:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffee0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000008c0)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb740, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:37:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x205, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x80, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x27}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, {[@dstopts={0x0, 0x7, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic={0x0, 0x8, "f69e511ac5ca18d0"}]}, @routing], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x2, 0xc1, 0x6, 0x7, 0x0, 0x84, 0x100010, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x401, 0x5233}, 0x4, 0x2, 0x3, 0x7, 0x6, 0xfffffff9, 0x2}, r4, 0xc, r0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r3, &(0x7f0000000440)={0x13, 0x7, 0x2, {0xa, '/dev/vcsa\x00'}}, 0x13) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x402403, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x6, 0x4, 0x60aafd4fc3110595}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r8, 0x40000000}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @ib={0x1b, 0x5, 0x0, {"cf1d0325399f10924fbda855d642c3b2"}, 0x5, 0xfff, 0xe84}}}, 0x90) 16:37:09 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x5, 0xfffffff7, 0x8a, 0x400, 0x2a, 0x7}) 16:37:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000001c0)=""/95, 0x5f}], 0x2, &(0x7f0000000240)=""/220, 0xdc}, 0x9}], 0x1, 0x0, &(0x7f0000000380)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2) 16:37:09 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x64d2, {0x3, 0x1e, 0x7f, 0x0, 0xba, 0x80}, 0x1f, 0x8}, 0xe) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe8000000000000000000000000000000006000000000000072880000001080140000101000000000000ff2fffffffffffff0000000400000400010000000000000004010004010086000018010200000000001803007605000001ff05000000000000000000000000000100000000000000000000000000fbea6c8772ec3d85c6db5e882f8e4f0e0ca3855caa4e6b3f04c78c0c3aa49bb965a5b82e8af5ac96"], 0x0) 16:37:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x9, 0x4, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={r5, @in={{0x2, 0x4e21, @remote}}, 0x5, 0x8, 0x6, 0x1, 0x800}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x40c, 0x3d, 0x4, 0x1, 0x9, 0x0, r6}, &(0x7f0000000300)=0x20) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100880000fe8006437f050dff00000003000088fffe8000000000000000072880000001080140000101000000000000ffffffffffffffff00000000000004000100000000000000040100040100000000000000000000020000000000009950899832d319b853710e9159990706860090780007020060c5961e00000000186fec00000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:10 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x40, 0x0) execveat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000001480)=[&(0x7f0000000300)='keyring+GPLselinux%!!\x00', &(0x7f0000001400)='cgroupbdevvmnet1*#-)-bdev&\x00', &(0x7f0000001440)=':vboxnet0[\x00'], &(0x7f00000016c0)=[&(0x7f00000014c0)='ppp0posix_acl_access\rvboxnet0trustedeth0\x00', &(0x7f0000001500)='&\x00', &(0x7f0000001540)='syz', &(0x7f0000001580)='asymmetric\x00', &(0x7f00000015c0)='&-&bdev$\x00', &(0x7f0000001600)='%]nodevg\x00', &(0x7f0000001640)='syz', &(0x7f0000001680)='syz'], 0x1000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'\x00\x00\x03', 0x0}, 0x0, 0x0, r1) keyctl$describe(0x6, r3, &(0x7f0000000400)=""/4096, 0x1000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10a00, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000000c0)=0x6) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000001700)=""/229) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0x0, 0xa, 0x34, "d28c0c422defc218cb4bef4e106d07fec8f6b32976913cfbf0bb131e92763755738473a749fba9325d649e61e77409a0e824e44bba4cc22db24cb779", 0x9, "5e6b62d03c21765457dbccdff5b1cf82b01eaa2fd56e21473aee7272cacc2aab358b3ad8d6e37874164d3a4fd36d73ce075055d70d5afb2036e5a92d", 0x8}) [ 3055.990120] net_ratelimit: 21 callbacks suppressed [ 3055.990154] protocol 88fb is buggy, dev hsr_slave_0 [ 3056.000296] protocol 88fb is buggy, dev hsr_slave_1 16:37:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCCONS(r0, 0x541d) 16:37:10 executing program 4: 16:37:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x1, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 16:37:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:10 executing program 5: socket$inet(0x2, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r5, &(0x7f0000000100)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x3ff, 0x6, {0x4144c3c249fc8517, 0x4, 0x2}, 0x240000, 0x9, 0x1d, 0x0, 0x17, 'user{selfcgrouptrusted(', 0x1, '}', 0x3, 'sh\x00', 0x3, 'sh\x00'}}, 0x58) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000240)=0x1, 0x4) socket(0xa, 0x2400000002, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x20080, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x14000, 0x0) write$capi20(r3, &(0x7f0000000180)={0x10, 0x4, 0x88, 0x82, 0x101, 0x81}, 0x10) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r7, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000340)={@remote, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x22, 0x0, 0x0, @loopback, @dev, {[], @icmpv6=@ni={0x8c, 0x0, 0x0, 0xee6, 0xfe00, 0x6, "a4599f2e4de6cd5a82441f58a2e97b386e53"}}}}}}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) 16:37:10 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fefe445f71dc1951ec6f258006437f050dff00000003000088fffe000000000000000000060000000000000728800000ffffffffffff0000834819c9fb38b860d4d6400000000004000100000010000000040100040100860090780007020060c5961e4d0262d629204708ced9cac99d5c000018010000000000001803007605adad091b0000000000000000000000000000010009a0a5cd31cadebc3c347c1dad4350160ccd35d9f864d1e85e1401a0b2502c1c0f25ab117f7354854b948e45b848146b49700e9df22b0967dcdcef36d8"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000140)=0x80) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r9, r8, 0x0, 0xc0000008000000b) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nvram\x00', 0x0, 0x0) r11 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x101080) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r11, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) r12 = syz_open_dev$audion(&(0x7f0000000700)='/dev/audio#\x00', 0x4, 0x400) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r14, r13, 0x0, 0xc0000008000000b) ioctl$IMCLEAR_L2(r8, 0x80044946, &(0x7f0000000600)=0x3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x410040}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="00022bbd7000fedbdf25010000000c00060005000000000000000c00060001000000000000004400070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0800010019b88755b7ba214490af5a57bb6fbd94275a4a07bd5112a2ce218ced50d80d4ec5365b5f788365bb413b100a6c19adaa720b77e6b89d2210c86ef0fb776233af46f95ed2b00211c35a165fecf5d7a7e4a6696a7b6d314c24178faccc3eaa938faced0b206a2f9017f1ef54e0e134e74e04dd82183eb9457d12457f1d26beaed7da7bfaf2", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="0c00050001000000000000000c000300d8845701000000000c000800080000000000000008000100000000000c0002000000000002000000"], 0x13}, 0x1, 0x0, 0x0, 0x40000}, 0x8000800) shutdown(r0, 0x0) r15 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r15, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$FIBMAP(r15, 0x1, &(0x7f0000000100)) 16:37:10 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, 0x0) pipe(0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) r3 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r3}, 0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000000175100c7722ecc84be68287a558be7700000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26aebac8e1ae913379902436610c52b724993141a5cb7ae2d9829219e3d981d196f1b7256c49aacd6b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a5cde17a53552e6797c056103b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb5b800000000"], 0x18}}], 0x1, 0x8800) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x8, 'veth1_to_bond\x00', {'team0\x00'}, 0x20}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000240)) 16:37:10 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000020000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010700000000001803007605000001ff0500000000000000000000000000010da1455af06ff0601a4686ba47afeace768c43c926c572862b6db3ea87c6e18494c127250f2735f5446a0049594c33e6a955fc337c34657c6ae9fda4f45f093555ae"], 0x0) 16:37:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x4, 0x80000000, 0xe9d0, 0x4, 0x9}) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100880000fe8006437f050dff00000003000088fffe80000000000000000000000000001f0006000000000000072880000001080140000101000000000000ffffffffffff502d2a8f0000000004000100000000000000040100040100000000000000000000020000000000009950899832d319b853710e9159990706860090780007020060c5961e00c68fa7d6010200000000001803007605000001ff050000000000000000000000000001"], 0x0) [ 3056.790116] protocol 88fb is buggy, dev hsr_slave_0 [ 3056.795267] protocol 88fb is buggy, dev hsr_slave_1 16:37:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="00000080", @ANYRES32=0x0], &(0x7f0000000140)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:11 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe8000000000000000000000000000000006000000000000072810000001080140000101000000000000ffffffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}, 0x100) 16:37:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400240, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x25d) ioctl$TIOCCONS(r0, 0x541d) 16:37:11 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x0, 0x3, {0xa, 0x4e23, 0x0, @remote, 0x7fff}}}, 0x80) 16:37:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) recvmmsg(r1, &(0x7f0000003140), 0x4000000000001a9, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000100)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000300)={0x6, 0x1}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x8000) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0x12) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) tgkill(r1, 0xffffffffffffffff, 0x21) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x141000) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'nlmon0\x00'}}) [ 3057.270122] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.275252] protocol 88fb is buggy, dev hsr_slave_1 [ 3057.280435] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.285501] protocol 88fb is buggy, dev hsr_slave_1 16:37:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = accept4$tipc(r0, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000100)={'nlmon0\x00', 0x3}) socket$pppoe(0x18, 0x1, 0x0) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3057.440136] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.445279] protocol 88fb is buggy, dev hsr_slave_1 16:37:11 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, 0x0) pipe(0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) r3 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r3}, 0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000000175100c7722ecc84be68287a558be7700000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26aebac8e1ae913379902436610c52b724993141a5cb7ae2d9829219e3d981d196f1b7256c49aacd6b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a5cde17a53552e6797c056103b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb5b800000000"], 0x18}}], 0x1, 0x8800) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x8, 'veth1_to_bond\x00', {'team0\x00'}, 0x20}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000240)) 16:37:11 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r0, ':chain\x00'}) syz_emit_ethernet(0x5, &(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYBLOB="37b3f7ad67205b603fe9211778a49cbac51a221738a2060cb5a81da74cca06a0112ed8d4449fdd43a318448d1e5d717330a5cbc1001d148424805cd9031198bd1e492b8f8778edfbb484097b4a7b588fde810d2572a31f2d595b", @ANYBLOB="5e04553547e55225a00b92dce8c5efeacef51b4882b3754dc74af47bf84d07d940e57e8bea5348", @ANYRESOCT], 0x0) 16:37:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x101100) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1, 0x220140) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xff, 0x7d) socket$l2tp(0x18, 0x1, 0x1) 16:37:11 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0xfffffeff, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') r4 = dup(r2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = getpid() tkill(r5, 0x9) tkill(r5, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4112}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7f}}, ["", "", "", "", "", "", ""]}, 0x1}, 0x1, 0x0, 0x0, 0x4800}, 0x80) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x106, 0x20, &(0x7f0000000100)}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 3057.930832] audit: type=1400 audit(1576255032.012:10656): avc: denied { setopt } for pid=4768 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 16:37:12 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000600)={0x1}) sendfile(r3, r2, 0x0, 0xc0000008000000b) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000080)="5ff7a47b7d81d2f0a4623b6fb035306349a007ec2debda7a312c2a0c07c1f5ec9f23c5346b97c578ab5251783a481491f1057ebe0e4e5357ff1668b13a29c5e765a7f084afab2b8928161e8ded60f2e38f9dad4e62d598f766db11461da598ee66ccb9847a5d45fd19244624e327377e6de43585b7480601d5c84967a49cb9484a8d8553e7b6478accf21fcaa26e9601f98ea42dc9604fe1e01ac3c1f723447dda7a33eab93e81f4d346bc3ea911d2a176904c0a656d6bd0afb58ac889004e45e18d56af14229093f63f49c4f33c8afc2aab259cfbafd1d0b530484723def62ba3", 0xe1, 0x5, 0x0, 0x1, r2}, &(0x7f00000001c0)) 16:37:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030088dd6076605100500000fe8006437f050dff00000003000088fffe80000000000000000000000000001f000000000000000000020300000000009950899832d319b853710e9159990706860090780007020060c5961e0000000000000000000000000000000000000000ff050000000000000000000000000001"], 0x0) 16:37:12 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/stat\x00') ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0xe2, 0x7, @buffer={0x0, 0x8f, &(0x7f0000000100)=""/143}, &(0x7f00000001c0)="b5f59f2907bfc51dc0cb95e0fb7652dfee48b49afe86da08728f58764d235a926df31cba7a51c0913579380abd3e6bfca726c98f617aca7c52dcad49750df50a6a8f6d130b5ec096223ef51048b34215cf6f118b98f6f115a9e51fa3e42a20ef29e1b90c462678466b854309b700369d4a08c98e11760b3f2938405d43be92615a00ecd2bd6c4cb3a754866557b05f8652191c75b900343df953a8942f4b5f09ccbef94e7395260e54a9d90dfc348a17fc76a744e26bdbb310b8a1d11a8f5292b64bc5c85964382ee63d1755f0bce8f5322be0d60481d6b8e49f9d5d78bf8998c5be", &(0x7f00000002c0)=""/26, 0x8, 0x20, 0x3, &(0x7f0000000300)}) sendfile(r1, r0, 0x0, 0xc0000008000000b) recvfrom$llc(r0, &(0x7f0000000040)=""/6, 0x6, 0x2000, &(0x7f0000000080)={0x1a, 0x338, 0x60, 0x0, 0x4, 0xdf, @random="bd73351e1a1b"}, 0x10) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x100c80) 16:37:12 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x78000018, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000240)=""/147) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$TIOCCONS(r1, 0x541d) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x8, [0x9, 0x200, 0x6, 0x5, 0xfff, 0x13e9, 0x4c, 0x8]}, &(0x7f0000000140)=0x14) 16:37:12 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x0) 16:37:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x302, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x401}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bind$netrom(r4, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$TIOCCONS(r0, 0x541d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000200)=0x5) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000640), &(0x7f0000000680)=0x4) 16:37:12 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r0, 0x0, 0xc0000008000000b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x7, 0xa7}, 0x0, 0xe9c, 0x2ad9b138, {0x1f, 0xf7}, 0x1, 0xfffffffa}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000140)=""/51) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x45402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x0, 0x1000, 0x8, 0x10, 0x1, 0x1, [], 0x0, r1, 0x4, 0x2}, 0x3c) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:12 executing program 4: socket$inet(0x10, 0xa, 0x36) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x9, 0x40}, {0x33f, 0x7}]}, 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x20000000fb], 0x1f004, 0x110400}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x13c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x18, 0x0, 0x1, 0xf6, 0x6, @link_local}, 0x14) 16:37:13 executing program 2: r0 = getpid() tkill(r0, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/netstat\x00') perf_event_open(0x0, 0x0, 0x1, r1, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) preadv(r3, &(0x7f0000002580)=[{&(0x7f0000000080)=""/131, 0x83}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f0000003640)=""/52, 0x2f}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/145, 0x91}, {&(0x7f0000003680)=""/130, 0xffffffffffffffca}, {&(0x7f0000002600)=""/4097, 0x1001}], 0x7, 0xffffffffffffefff) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000340)=ANY=[@ANYBLOB="ffff008000000000000003e485dd6076605100780000fe8006437f050dff00000003000088fffe80000000000000000000000000000006000000000002072880000001080140000101000000000000ffffffffffffffff00000000000004000100009497000000000004010004010000000000000000000000000000000000860090780007020060c5961e0000000018010200000000001803007605000001ff0500"/174], 0x0) 16:37:13 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000140)={{0x11, @rand_addr=0x8, 0x4e23, 0x0, 'sed\x00', 0x2, 0x7, 0x62}, {@multicast1, 0x4e22, 0x3, 0x81, 0x29004b03, 0x4bf06b5e}}, 0x44) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r1 = accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, &(0x7f0000000080)=0x80, 0x40000) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0xfffffffffffffeaa}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0xc1}, 0xf) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000780)='/dev/input/mouse#\x00', 0x100000000, 0x26d00) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000007c0)=0x7, 0x4) 16:37:13 executing program 5: socket$inet(0x2, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x68, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 16:37:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0x3, 0x2b, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000300)=""/43}, &(0x7f00000003c0)=0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x126, &(0x7f0000000080)={@remote, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3, 0xe}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0xf0, 0x16, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @rand_addr="8106d6004bbb505ce691d2c32bcb0ef0", {[@dstopts, @routing={0x0, 0x2, 0x2, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @tipc=@name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0x4, 0x200, 0x1, 0x4e23, 0x4e22, 0x3, 0x3}, [{0x6, 0x2, 0x1003, 0x1, 0x0, 0x401, 0x3, 0x8000}, {0x81, 0x8000, 0x20, 0xfff, 0x0, 0x9, 0x0, 0x8}, {0x8, 0x40000, 0x7, 0x9, 0x5, 0xffffbfff, 0x7, 0xfffffa8}, {0x7d, 0x1, 0x23, 0x7fff, 0xfcf, 0x7, 0x8, 0xcc}, {0x7, 0x2, 0x7a50, 0x4, 0x7b16f915, 0x401, 0x0, 0xe733}, {0x80000000, 0x12, 0x1, 0x7fffffff, 0x7fff, 0x2, 0x8, 0x6af4}]}}}}}}, 0x0) 16:37:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={r4, 0x1000, "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"}, &(0x7f0000000000)=0x1008) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)={0x1, {}, 0x1000, 0x6}) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000008000000000000000000001"], 0x0) 16:37:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x80000001, 0x10001) 16:37:13 executing program 4: socket$inet(0x10, 0xa, 0x36) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x9, 0x40}, {0x33f, 0x7}]}, 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x20000000fb], 0x1f004, 0x110400}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x13c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x18, 0x0, 0x1, 0xf6, 0x6, @link_local}, 0x14) 16:37:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100880000fe8006437f050dff00000003000088fffe80000000000000000000000000001f0006000000000000072880000001080140000101000000000000ffffffffffffffff00000000000004000100000000000000040100040100000000000000000000020000000000009950899832d319b853710e9159990706860090780007020060c5961ee500000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/27, 0x1b}], 0x7, &(0x7f0000000540)=""/176, 0xb0}, 0x10002) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000640)={'lo\x00', 0x2, 0x4}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000400), 0x4) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:13 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/19, 0x13) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x4) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, r2, 0x3}, 0xc) 16:37:13 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) fchdir(0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x20800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000280), 0x0) r0 = getpid() write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7fff, 0x80}}, 0x30) tkill(r0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 16:37:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, 0x0, &(0x7f0000000200)}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000040)=0xffffffe1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x8, 0x8000, 0x1, 0x149a, 0x4, 0x80, 0x1f, 0xe5, 0x7fffffff, 0x6, 0x3, 0xd76}) ioctl$TIOCCONS(r0, 0x541d) 16:37:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x488, 0x120, 0x120, 0x120, 0x3a0, 0x3a0, 0x3a0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xa684, 0x100}}}, {{@arp={@remote, @dev={0xac, 0x14, 0x14, 0x1c}, 0xffffffff, 0x0, @empty, {[0x0, 0xff, 0x0, 0xff]}, @mac=@link_local, {[0x0, 0xff, 0x0, 0x7f]}, 0x8, 0x9, 0x200, 0x1, 0x6, 0x4, 'veth0_to_team\x00', 'teql0\x00', {0x1fe}, {0xff}, 0x0, 0x10}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast1, 0xc}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast1, 0x1, 0xaf38aa93d72954d8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d8) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41800, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r3, 0x3, &(0x7f00000008c0)=""/163) 16:37:13 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x20, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/^wsng\x00', 0x44000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800, 0x0, 0xff}, 0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x161042, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000003c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000001c0)={0x7fffffff, 0x40, 0x401}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) 16:37:13 executing program 3: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x18, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='netpci0\x00', 0x5, 0x4, 0x6}) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) 16:37:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000000)=[0xfffffe00, 0x3, 0x6, 0xd5ec], 0x4, 0x401, 0x80000001, 0x6, 0x10001, 0x20, {0x1ff, 0x1, 0xa44, 0x81, 0x3, 0x990d, 0x4, 0x5, 0x2, 0x2, 0x9, 0x2, 0x2, 0x1200000, "d8655eccf62e47385f428442dc15db28562c7c10bde90fad80700fff364f5668"}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x88, 0x0, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1]}}, @enc_lim, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x76, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 16:37:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/187, 0xbb}], 0x2, &(0x7f0000000500)=""/23, 0x17}, 0x100}], 0x400000000000172, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r4 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000580)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f00000008c0)={{0x8, 0x6, 0x40, 0x7f, '\x00', 0x10001}, 0x3, 0x234, 0x8, r7, 0x3, 0x3, 'syz1\x00', &(0x7f0000000600)=['#\x00', '%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', '%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q'], 0x18e, [], [0x67, 0x6, 0x8, 0x6]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) getsockopt$inet_opts(r2, 0x0, 0x14af1f85ee66423, &(0x7f0000000a00)=""/219, &(0x7f00000000c0)=0xdb) 16:37:14 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000028800000ffffffffffff00000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001dcf1bec2ea413cdb10c5813591b9fe62a73f61ccd22974dddc37a2fa817962f45d6f677716347efbcd7e50e2d048c932119cd50603c0ac1ecce4211bd92e8b757c1caefb2aaf75e987bac0d9a883c473ae78038d6a423925ae61643179f58f27506a00000000000000000049bbea17476266a6300417d994b741848a190e2a91779969861c1cad759c7f7af26483785f764aacdc9112d887a5c07710d38556e41e7b548822a44eeea0e0aaa14b54f5afe980633b9b348af630624279dcb3a8b1ed992bb610762b50744a0c31d80d3beac56ae7b0e2b5dda3d8e8966ae1c2e03d168c8a2f084ee40e49663950041de58f08718931d44b6f4e8ca0dd"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000240)) r3 = getpid() tkill(r3, 0x9) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000180)='\x89l\x9a\xa5\xa9\xb86\x04\x1b\x89i\a\xf6\xce\xc8\xb5\xa2\v\x16\x0f_\xb7\xd7\xb9\x9a]\xf9QG1#\x9f^\x01\xf2\x90D\xc2\x8a\xc9\xb1y\x9d\xb8(\xde\x91%\x11\xb4\xb5\xfc\xc1N\x94&w\x026Q\x87\xa3\xcc\xb4\xb71J\b\xfd\xbd\xce\xe5\xd0\xbc\xa28=\xe9\x0f[\xd1\a&\xa0\xcdw={\xe0\x8dK\xd1\xd2\xcd\x03g\x98\xb2x\xb7\x9eVF\xce\xf9\xcd\xe0\xa3vH\xf1\x92\xdagx,,\xdb\x04\xb2\x85y\xb2\x04\xbeO\x1b\x8e~I\xc9\xfe\x9f&P\'\xa91V\x0f\xcb\x89\xd8\xf12\xea\xa9\xaf\xbe\xe0\xf0\xbb\xf7\x0f\xc8o\xa0 \xf5\xa2%4\v\xc0\xc3\x1c\xd3\x80\xf8\xe4F\x03?.E\x16\xefV\xabt\x9c)\x03z\x14Clb~') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 16:37:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) syz_open_dev$ttys(0xc, 0x2, 0x1) 16:37:14 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x20, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/^wsng\x00', 0x44000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800, 0x0, 0xff}, 0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x161042, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000003c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000001c0)={0x7fffffff, 0x40, 0x401}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) 16:37:14 executing program 3: shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff000000000000040001000000000000000401000401c3010090780007020060c5961e000000001801cc9b000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) getsockopt$inet6_dccp_buf(r2, 0x21, 0x3, &(0x7f00000000c0)=""/109, &(0x7f0000000140)=0x6d) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "132a4fbecce273f4", "2a573db02f5411474428dc828f6dd94ad1eb3f53af90461698a25f7b212773ee", "55f85784", "7a9814f5d5f3babb"}, 0x38) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000400)={@dev={[], 0x16}, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x70, 0x0, 0xff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @dev={0xfe, 0x80, [], 0x1f}, {[@dstopts={0x0, 0x6, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x1, 0x40, [0x101, 0xffffffffffffffff, 0x4000000000000, 0x1001]}}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @generic]}, @routing={0x0, 0x2, 0x1, 0x0, 0x0, [@rand_addr="9950899832d319b853710e9159990706"]}], @icmpv6=@mld={0x106, 0x0, 0x0, 0x234, 0x8, @empty}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') write$P9_RXATTRCREATE(r2, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 16:37:14 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x20, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/^wsng\x00', 0x44000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800, 0x0, 0xff}, 0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x161042, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000003c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000001c0)={0x7fffffff, 0x40, 0x401}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) 16:37:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xd43a5d823ca96928, 0x0) 16:37:14 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0xd075) 16:37:14 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x20, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/^wsng\x00', 0x44000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800, 0x0, 0xff}, 0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x161042, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000003c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000001c0)={0x7fffffff, 0x40, 0x401}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) 16:37:14 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmdt(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = getpgrp(0xffffffffffffffff) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000500)={0xee226fc3e3f0f26b, r3}) removexattr(0x0, &(0x7f00000003c0)=@random={'btrfs.', '\x00'}) r4 = dup(r2) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0, 0x0, 0x6, {{0x0, 0x3}}}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = syz_open_procfs(0x0, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000500)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1c40) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x178000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) getdents64(r7, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x18380, 0x0) r8 = dup(0xffffffffffffffff) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, 0x0) 16:37:14 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r4, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x51}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10010050}, 0x10000000) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)={0xa, 0x0, [{0x1, 0x3, 0x0, 0x0, @sint={0x6, 0x5770}}, {0x5, 0x3, 0x0, 0x0, @sint={0x0, 0x100}}, {0x0, 0x6, 0x0, 0x0, @irqchip={0x401, 0x3}}, {0x1000, 0x4, 0x0, 0x0, @adapter={0x4ecf, 0x30, 0x7, 0x1f, 0x40}}, {0x3, 0x3, 0x0, 0x0, @adapter={0xa9, 0x1, 0x6, 0x3, 0x6}}, {0xfe, 0x3, 0x0, 0x0, @msi={0xffffffff, 0x7fffffff, 0xa4e2}}, {0x4, 0x4723118f813756e8, 0x0, 0x0, @adapter={0x3, 0xffffffffffffff8f, 0x5, 0x4, 0x9}}, {0xb4be, 0x4, 0x0, 0x0, @msi={0x0, 0x2, 0x81}}, {0x1, 0x0, 0x0, 0x0, @irqchip={0x74c20691, 0x80000000}}, {0xfb9e, 0x1, 0x0, 0x0, @irqchip={0x8, 0x4}}]}) waitid$P_PIDFD(0x3, r0, &(0x7f0000000240), 0x8, &(0x7f0000000400)) socket$inet_dccp(0x2, 0x6, 0x0) 16:37:14 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x20, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/^wsng\x00', 0x44000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800, 0x0, 0xff}, 0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x161042, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000003c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000001c0)={0x7fffffff, 0x40, 0x401}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) 16:37:14 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xf25f4a1abf33fd67, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:14 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x20, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/^wsng\x00', 0x44000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800, 0x0, 0xff}, 0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x161042, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000003c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000001c0)={0x7fffffff, 0x40, 0x401}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) 16:37:14 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x6c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xffffffffffffff47}, 0x4050010) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:15 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = getpid() r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x155a, 0x2080) read$eventfd(r1, &(0x7f0000000080), 0x8) tkill(r0, 0x9) syz_open_procfs(r0, &(0x7f0000000000)='net/netlink\x00') 16:37:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000640)) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) preadv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/189, 0xbd}, {&(0x7f0000000480)=""/91, 0x5b}], 0x10000000000002d9, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x800) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:15 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x20, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/^wsng\x00', 0x44000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800, 0x0, 0xff}, 0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x161042, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000003c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000001c0)={0x7fffffff, 0x40, 0x401}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) 16:37:15 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 16:37:15 executing program 3: ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f00000001c0)) syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000240)={0x0, 0x10000, 0xc61, 0x101, 0xffffffff80000001, 0x6, 0xc1, 0x3ff, 0x0, 0x100000000, 0x3, 0x2}) 16:37:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4180, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3061.430105] net_ratelimit: 16 callbacks suppressed [ 3061.430110] protocol 88fb is buggy, dev hsr_slave_0 [ 3061.440239] protocol 88fb is buggy, dev hsr_slave_1 [ 3061.445388] protocol 88fb is buggy, dev hsr_slave_0 [ 3061.450531] protocol 88fb is buggy, dev hsr_slave_1 [ 3061.590167] protocol 88fb is buggy, dev hsr_slave_0 [ 3061.595313] protocol 88fb is buggy, dev hsr_slave_1 16:37:15 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmdt(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = getpgrp(0xffffffffffffffff) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000500)={0xee226fc3e3f0f26b, r3}) removexattr(0x0, &(0x7f00000003c0)=@random={'btrfs.', '\x00'}) r4 = dup(r2) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0, 0x0, 0x6, {{0x0, 0x3}}}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = syz_open_procfs(0x0, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000500)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1c40) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x178000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) getdents64(r7, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x18380, 0x0) r8 = dup(0xffffffffffffffff) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, 0x0) [ 3061.750721] protocol 88fb is buggy, dev hsr_slave_0 16:37:15 executing program 5: 16:37:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)='vboxnet1\x00', 0x9, 0x7) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/254, 0xfe) ioctl$TIOCCONS(r0, 0x541d) 16:37:16 executing program 4: 16:37:16 executing program 1: r0 = getpid() tkill(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1410, 0x31d39986d76b7ab3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x800000101, 0x7e}, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x603, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='erspan0\x00', 0x1, 0x90, 0x5}) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x107201, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000100)) r3 = msgget(0x1, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = getgid() r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r9, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r10 = fcntl$getown(r9, 0x9) r11 = getpid() tkill(r11, 0x9) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000740)={{0x2, r4, r5, r7, r8, 0x0, 0x40}, 0x5, 0x4, 0x30, 0x3, 0x2, 0x80000000, r10, r11}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r12, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r14, r13, 0x0, 0xc0000008000000b) connect$nfc_llcp(r13, &(0x7f00000004c0)={0x27, 0x1, 0x2, 0x2, 0x5, 0x1, "f0d26b71433efbce23d5abbf6eb8588854f25bd3b628ab5b279da52a17c43cc9db43a15b052a52a35b25078bff66d7406265f6a2073ef04a46706157b2ee45", 0x27}, 0x60) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x3}, 0x0, 0x3}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x800, {{0xa, 0x4e22, 0x6, @ipv4={[], [], @empty}, 0x6ea}}, {{0xa, 0x4e20, 0x80000000, @remote, 0x5}}}, 0x108) 16:37:16 executing program 5: 16:37:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000, 0x4, 0x7, 0x800, 0x5}) 16:37:16 executing program 4: 16:37:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3062.230147] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.235295] protocol 88fb is buggy, dev hsr_slave_1 16:37:16 executing program 2: 16:37:17 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000800000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1ff, 0x129080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) 16:37:17 executing program 5: 16:37:17 executing program 4: 16:37:17 executing program 2: 16:37:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x44f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 16:37:17 executing program 4: 16:37:17 executing program 5: 16:37:17 executing program 2: [ 3063.030155] protocol 88fb is buggy, dev hsr_slave_0 16:37:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r7, @in={{0x2, 0x4e23, @multicast1}}, 0x47ee, 0x7}, &(0x7f0000000140)=0x90) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000100)) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) recvfrom$inet(r2, &(0x7f00000008c0)=""/4096, 0x1000, 0x8081, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:17 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x6c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xffffffffffffff47}, 0x4050010) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:17 executing program 4: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = getpid() r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x155a, 0x2080) read$eventfd(r1, &(0x7f0000000080), 0x8) tkill(r0, 0x9) syz_open_procfs(r0, &(0x7f0000000000)='net/netlink\x00') 16:37:17 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dde076605100680000fe8006437f050dff00aabf03000088fffe80000000000000060000000000000728800000ffffff2e32ccfc80940009000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r3, 0xdf, "eca335159219e03214d053f274922714b0e08f49861d5160e22ca6c697bf9df1b0cff8a08467878f023c00331ce8cb5117d762bf3ce997a6385db040bfe775a0b10491349a0bb386cc33c9f92455ba377e4d169ef6455fbd1d7ec27dd4eae4eb03d491a06bbb25c6b26c03d00cc83ff7650c0dc63d6a771b8237b2bde2e37317d989449b953027c82783d1665ad6e933e593c740914661f8b30b6bef408418ffbf6f503602cf477e15f7bfc7c6236c1ef1159e71e8d478efa31fda23cab80417becbe5fa3fbf4a416861f9e7a5dfcca575d2fa790dc9d65d072d451ceecd87"}, &(0x7f0000000180)=0xe7) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r0, 0x0, 0xc0000008000000b) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x4, 0x101, &(0x7f0000000000)=0x90c}) 16:37:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:17 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) 16:37:17 executing program 2: socket$inet(0x2, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r5, &(0x7f0000000100)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x3ff, 0x6, {0x4144c3c249fc8517, 0x4, 0x2}, 0x240000, 0x9, 0x1d, 0x0, 0x17, 'user{selfcgrouptrusted(', 0x1, '}', 0x3, 'sh\x00', 0x3, 'sh\x00'}}, 0x58) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000240)=0x1, 0x4) socket(0xa, 0x2400000002, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x20080, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x14000, 0x0) write$capi20(r3, &(0x7f0000000180)={0x10, 0x4, 0x88, 0x82, 0x101, 0x81}, 0x10) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r7, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000340)={@remote, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x22, 0x0, 0x0, @loopback, @dev, {[], @icmpv6=@ni={0x8c, 0x0, 0x0, 0xee6, 0xfe00, 0x6, "a4599f2e4de6cd5a82441f58a2e97b386e53"}}}}}}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) 16:37:17 executing program 4: socket$inet(0x2, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r5, &(0x7f0000000100)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x3ff, 0x6, {0x4144c3c249fc8517, 0x4, 0x2}, 0x240000, 0x9, 0x1d, 0x0, 0x17, 'user{selfcgrouptrusted(', 0x1, '}', 0x3, 'sh\x00', 0x3, 'sh\x00'}}, 0x58) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000240)=0x1, 0x4) socket(0xa, 0x2400000002, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x20080, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x14000, 0x0) write$capi20(r3, &(0x7f0000000180)={0x10, 0x4, 0x88, 0x82, 0x101, 0x81}, 0x10) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r7, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000340)={@remote, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x22, 0x0, 0x0, @loopback, @dev, {[], @icmpv6=@ni={0x8c, 0x0, 0x0, 0xee6, 0xfe00, 0x6, "a4599f2e4de6cd5a82441f58a2e97b386e53"}}}}}}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) 16:37:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x100, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@reserved}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:17 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) syz_emit_ethernet(0x2437, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x2, [0x57d, 0xd5b, 0x275, 0xc92]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000140)={0x80000000000000, 0x2000}) syz_emit_ethernet(0x9d, &(0x7f0000000040)={@broadcast, @dev={[], 0x9}, [{[], {0x8100, 0x2, 0x1, 0x7}}], {@generic={0x890d, "805143bf553d3f361906fe38bee38c5417e350a5a490972bc9e40e1d22e7453ed117ec56dc7c57428d44f27ba63c9b07f0d5daacd2a90f3bcf5d5ade4adfc5b9ba1c6149141290533cf90a93f365719a96f79eb0c190726fdbda0f3503c1c27f50d3cf7b0ff5331b3a4a43956a07fb373a5dc553239de0055f551c0492ad3e5b96ac0ca8af4548b29f8094"}}}, &(0x7f0000000100)={0x0, 0x3, [0x65b, 0x482, 0xc38, 0xdff]}) 16:37:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x80000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x3c, 0xb, 0x1000, 0x3f, r3}, &(0x7f0000000140)=0x10) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20, 0x0) 16:37:18 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x6c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xffffffffffffff47}, 0x4050010) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 16:37:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:18 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0xc0000008000000b) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 16:37:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = request_key(&(0x7f0000000300)='.dead\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='&):\x00', 0xfffffffffffffff8) request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='/\x02roup.stap\x00', r1) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:18 executing program 2: socket$inet(0x2, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r5, &(0x7f0000000100)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x3ff, 0x6, {0x4144c3c249fc8517, 0x4, 0x2}, 0x240000, 0x9, 0x1d, 0x0, 0x17, 'user{selfcgrouptrusted(', 0x1, '}', 0x3, 'sh\x00', 0x3, 'sh\x00'}}, 0x58) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000240)=0x1, 0x4) socket(0xa, 0x2400000002, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x20080, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x14000, 0x0) write$capi20(r3, &(0x7f0000000180)={0x10, 0x4, 0x88, 0x82, 0x101, 0x81}, 0x10) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r7, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000340)={@remote, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x22, 0x0, 0x0, @loopback, @dev, {[], @icmpv6=@ni={0x8c, 0x0, 0x0, 0xee6, 0xfe00, 0x6, "a4599f2e4de6cd5a82441f58a2e97b386e53"}}}}}}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) 16:37:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:18 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x280, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 16:37:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') r2 = getpid() tkill(r2, 0x9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x8, "61c310af013fabf1"}) ptrace$cont(0x7, r2, 0x100000001, 0xffffffff80000000) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000100)=0x79) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000300)={0xe, 0x1, 0x6, 0xd, 0xca, "1ab117efb2475ef7eef8723eceee3376b04a4770f644d89a340c81ee653dac0127142d6944c9f0ef743b44c326caf3cd6b7e4e9c5e201f0737efea44a5e525ab749d64f1d1f1eecb25176fbdc7b95be72c1665b5bd871fd2552eb8f596c43d5e3447ed315e91b543942e7171c09089c14ec5229a9f3191769151b139da3c92622c81f8ab055deee619318011dda87d7346a9d895ed3e43469ebf208acdbc8c559fe19abd3a3f23cfc571f0a5ed61aae0f982ffb2ac4eb0b4db09cf97ba7594a6d8ed61bb859a98fd27f4"}, 0xd6) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000400)={0x4, @vbi={0x99, 0x0, 0x6, 0x47314356, [0x1, 0x4], [0x2, 0x2], 0x2b4246aa0b41e762}}) 16:37:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {0x0}, {}, {}, {}, {}]}) ptrace$setopts(0x4206, 0x0, 0x9a4, 0x4) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000140)={r2, 0x3}) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000300)={0x11e, 0x7d, 0x1, {0x0, 0x117, 0x541, 0xffff, {0x2, 0x4}, 0x82100000, 0x8, 0x40, 0xc85, 0x6, 'GPL&#%', 0xc, '/\x02roup.stap\x00', 0xc6, '%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xc, '/\x02roup.stap\x00'}}, 0x11e) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x400000000000095, 0x61791381b0d3ab78, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 16:37:19 executing program 3: syz_emit_ethernet(0x0, &(0x7f0000000340)=ANY=[], 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00o\x00', 0x0, 0x5a7140) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000100)={@multicast1, @empty}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r3, 0x0, 0xc0000008000000b) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000040)={r2, @in={{0x2, 0x4e21, @local}}}, 0x84) 16:37:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r0, 0x541d) 16:37:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x8}, 0x3290, 0x1, 0x4000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:19 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100)) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076607100680000f38001000000000000000003000088fffe8000be06cf24b242ac227880b7352757a15f0000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:19 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x6c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xffffffffffffff47}, 0x4050010) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:20 executing program 2: socket$inet(0x2, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r5, &(0x7f0000000100)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x3ff, 0x6, {0x4144c3c249fc8517, 0x4, 0x2}, 0x240000, 0x9, 0x1d, 0x0, 0x17, 'user{selfcgrouptrusted(', 0x1, '}', 0x3, 'sh\x00', 0x3, 'sh\x00'}}, 0x58) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000240)=0x1, 0x4) socket(0xa, 0x2400000002, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x20080, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x14000, 0x0) write$capi20(r3, &(0x7f0000000180)={0x10, 0x4, 0x88, 0x82, 0x101, 0x81}, 0x10) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r7, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000340)={@remote, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x22, 0x0, 0x0, @loopback, @dev, {[], @icmpv6=@ni={0x8c, 0x0, 0x0, 0xee6, 0xfe00, 0x6, "a4599f2e4de6cd5a82441f58a2e97b386e53"}}}}}}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) 16:37:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 16:37:20 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 16:37:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x108000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) accept$ax25(0xffffffffffffffff, &(0x7f0000001340)={{0x3, @default}, [@default, @netrom, @null, @bcast, @null, @default, @null, @default]}, &(0x7f00000013c0)=0x48) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000580)=0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) signalfd4(r2, &(0x7f00000005c0)={0x200}, 0x8, 0x80800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x5, 0x0, 0x1b6, &(0x7f0000000600)}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendfile(r4, r3, 0x0, 0xc0000008000000b) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000540)={0x80000000, 0xffff, 0x1, 0x4eb, 0xee}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000500)={0x6, 0x1a98a920, 0x1, @discrete={0x3, 0xfffffffa}}) 16:37:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x80, 0x0) getsockname$netlink(r0, &(0x7f0000000300), &(0x7f0000000340)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000380)=0x7, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='oom_score\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:20 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x8c957323b99525cf) 16:37:20 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xffffffff, @rand_addr="a9bec35043f2010eded92430f5b8bf7d", 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 16:37:21 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x6c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xffffffffffffff47}, 0x4050010) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x100, 0x2, "360b67ca0e5547efa3e7a71cb1d7865cf32e6e5987f60b878c56415e9e86f6e2f4d7d6641cf8c94c4596a8aad81205ac99dbf6590c08c6b44bb8fe54b3c428a1e9a5f7ef0ec6f75e7547069238b3c832f43e5d15ca245f841fbc3dcb21f844e170111e2ea9b083366fda1f7a52f433e1d39aaadeb2f2cafd35edca8a7be98e8b087677369e23161eb7ae176d965bee2734a760151cc22a31198e912e8fd619e1050494d824d8f591bf5babddfab16b800838810cd325af9bad295ab86bf9c4fb49e13f41e140a2efc72875c41a93f605074e8d65e57da1c2165eee7382e162780e99903533ade83de2852b6577ce5c2c01ee4e384dda46974b6ba204c4713766"}) clone(0x20008000, &(0x7f0000000440)="ab89491cc433ea06ad06b53adb4349d1aab0636a59758eee22c9cb0b5259ea58fb1419879266817ad4e69f1e2b3a6fc21782f922e751e1cbbdc6309a09e3beda654f237bf80898df4674a32c3ade5fba21782ba135059859ef29b1b4fc4358f44b4bd25e653ae237e9115b3402789eaedc1155c85b895cca76e61c73b00778f779ecbc0e9aed17e4588059a56f08912f4e7062e422a032", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000500)="c212a75e27a98f8d0028dea934180383ffe5dafd478eb21e3449f7b864fd1fad0eca64c8276c301b65f100a4308c1a399e716a9237a4f21515be9422aa8f20bdefa498ad9583edf1db17d5d5f5aab88219b941522b0ab00d760dfcdefeffa739bc3be6fc4f0de2ac911b98a6bfe0cfe7cd85e10b4a8a17ff6b992efa21666f88566eb542f5ac68814ccd809ed8179743") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) 16:37:21 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x482182) 16:37:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsa\x00', 0x4100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={r4, 0x1f}, 0x8) syz_read_part_table(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="cdf47f74ade03a566ae1871698952042e4d264e51ec3fbadbe399289f1ffb0294c25928c19365975ccc3853ca2a4a5f4c55c4e339051ad52003dabb49af92220cbc7e8de5528ab5f94eb6600f7d7b4eaa73d71c7555079021105957ab97fbb2e2fc129a318fdceca3f6cb675b160f29aa93599c7af99deb8d03833d3a320caa3f1a5d4f0d5ac40a8ae638e80f7d77f74b212ecffc55326c0443d32a190d63f3377c8dfaf5643b9e3f0ba5e3cea199ccbc3396bf30cc6acb480ffa538d0229d8c0fe0cb7efa37c3edfdec343e4ebddffadbc1b6b0ece17d58e89fb950b7732827bbfa8da6d282d6e9485d726a98c0af6523e77699", 0xf4, 0x7}, {&(0x7f0000000100)="d4e7623d4c2afbb5c3566399ae1bcd3aaab9539c2f2d454724073c01ed3e66a3c4bd2c7a60f206a5ce69cb79918e0345780aee5570a45be6373c2dd53083262a4a328cc8eb9194b9d1c3be2691ef588ad3ab139cdbdd878382d0e9f811f4906d9c4a0369ed2f2d30f7691ffb28cb01ea32bbd859be11080eef090fd162", 0x7d, 0x40}, {&(0x7f0000000180)="cd8a215e9f5a42425fc9c7f7059dedfbf9f666e0915d3c06232a083c31c07b57bbda8ac191842af71cd48e72a8808ba61abb0268e02d54eae4704cf6385d5a66e9179b7efab9eb646171f6cd6cad1f325a895d6bd5bfc56765af4d8cd90963d44bb3d2e513b0b9fcd3be9d785211a64694ce9cfd6d97b6a86a7832192f46c63d965f207cc58df8b04285365d40bc9b9107720b97b4bb74b107b751330d0f2419cb8d0b0c7f4a9cbdb59e45af18ce0967be7f0801e97769536b8b688965ec8c42d8b1997318d2f65df2bfa0e4cefba335fe741bec804aa534ad677b1cf80769cf5dfc30620b4063f37ca605", 0xeb, 0x5}, {&(0x7f0000000280)="4eba64ccb9615d8adc326b01a6e3a4952825", 0x12, 0xd2}, {&(0x7f00000002c0)="3fc75c39011a730cf15a80ed1464c0192569b5e4d84c8f8cf1f2", 0x1a, 0x7f}, {&(0x7f0000000300)="c88330db3b9396308d968e0e2dd6b04cd0bdd30037ab6cc1a05a22ade9d20690ffb0c6355db38a239735151697109ec4064a5f0aac7e6e29f5e6a7240c4dbc76c14b78260bd4f5f62e744f73b886896f264424dfb651877007a7634bb5fb0900a98a6be729790df8567a5559facdcc7c5c856c425ba1b961e546050e1307ebe5d07b79ec89d7323c760555b8d83f8903f464528bd8d2c0c7c5d6242938ca1073b97297d4933dd46cdbc6a703221a259febc1cb7f852e6572", 0xb8, 0x100}]) ioctl$TIOCCONS(r0, 0x541d) 16:37:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3067.149866] Dev loop0: unable to read RDB block 1 [ 3067.159976] loop0: unable to read partition table [ 3067.178512] loop0: partition table beyond EOD, truncated [ 3067.190119] net_ratelimit: 21 callbacks suppressed [ 3067.190123] protocol 88fb is buggy, dev hsr_slave_0 [ 3067.193051] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3067.195179] protocol 88fb is buggy, dev hsr_slave_1 16:37:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x108000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) accept$ax25(0xffffffffffffffff, &(0x7f0000001340)={{0x3, @default}, [@default, @netrom, @null, @bcast, @null, @default, @null, @default]}, &(0x7f00000013c0)=0x48) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000580)=0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) signalfd4(r2, &(0x7f00000005c0)={0x200}, 0x8, 0x80800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x5, 0x0, 0x1b6, &(0x7f0000000600)}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendfile(r4, r3, 0x0, 0xc0000008000000b) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000540)={0x80000000, 0xffff, 0x1, 0x4eb, 0xee}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000500)={0x6, 0x1a98a920, 0x1, @discrete={0x3, 0xfffffffa}}) 16:37:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 16:37:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x101, 0x400) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x185000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000000000100050180ffff07007f00"], 0x14) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @remote, @multicast1}, 0xc) 16:37:21 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2000) [ 3067.670130] protocol 88fb is buggy, dev hsr_slave_0 [ 3067.675282] protocol 88fb is buggy, dev hsr_slave_1 [ 3067.680496] protocol 88fb is buggy, dev hsr_slave_0 [ 3067.685563] protocol 88fb is buggy, dev hsr_slave_1 16:37:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x800, 0x0) clock_gettime(0x6, &(0x7f0000000540)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/253, 0xfd}], 0x1, &(0x7f00000004c0)=""/54, 0x36}, 0xffff}], 0x1, 0x42, &(0x7f0000000580)={r4, r5+30000000}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x900c, 0x3, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:21 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076600300680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090580007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x2) ioctl$TIOCCONS(r0, 0x541d) [ 3067.830149] protocol 88fb is buggy, dev hsr_slave_0 [ 3067.835319] protocol 88fb is buggy, dev hsr_slave_1 [ 3067.990129] protocol 88fb is buggy, dev hsr_slave_0 16:37:22 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x6c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xffffffffffffff47}, 0x4050010) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:22 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff01803f94000000000000605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x21}) 16:37:22 executing program 3: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0xfffffffffffffcf6, 0x0, 0x4, {0x100}}, 0x18) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c2896076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff05000000000000000000000000000100000000"], 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4) 16:37:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) [ 3068.470108] protocol 88fb is buggy, dev hsr_slave_0 16:37:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r0, 0x541d) 16:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r0, 0x541d) 16:37:22 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r3, 0x1, 0x4d, "f6a79327ce2a8f701640756ac0abd80e9280228704e003ca6a7cc345ee54dbe1d0c7792a6cfea62f89a4ad48ec7413531f3c03fdff5ed56bc220acd97205f6e872e6a0551de12c2a40f1eb3704"}, 0x55) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000040), 0x1) 16:37:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 16:37:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') bind$nfc_llcp(r0, &(0x7f00000003c0)={0x27, 0x1, 0x2, 0x75d3aca38e415902, 0xa0, 0x9, "c57deb7f5cb549b9b4748e369d962aa3954af3abdde895bfd1836ad91476efc0578e8c79582797179d9ee82e2775b23544128bcf67118bd265cde2986aa0c5", 0x1a}, 0x60) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="c75817c883c358edd983cee833e09b170bb4c6228c0d486f8fc4c942ec074ef1f49dc63ff45a7e809c1ce9701bfc893329f6eb4b52bb640439a2a6b32dc3a01704", 0x41) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) write$vnet(r4, &(0x7f0000000340)={0x1, {&(0x7f0000000140)=""/61, 0x3d, &(0x7f0000000300)=""/28, 0x3, 0x1}}, 0x68) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r2 = dup(r1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r2, r3, 0x17, 0x2}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) readv(r4, &(0x7f0000003740)=[{&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000002600)=""/86, 0x56}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/182, 0xb6}, {&(0x7f00000001c0)=""/32, 0x20}], 0x8) 16:37:23 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x6c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xffffffffffffff47}, 0x4050010) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:23 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$search(0xa, r4, &(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') keyctl$set_timeout(0xf, r7, 0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16, @ANYPTR64, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRESHEX=r2, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32=r3, @ANYBLOB="3385ad247ad2b23e75459b9c2de0c393697162284957ac5dc59def601552093467dd9730865f7c392095e6be51dfa94e1bb2e67d3b5dfab0785998ecc8495ab513e341c33f4d5a310c7c1ffcf5c8d654413935aa78ac32df2b7d7b4c76521df2fa271ed8745adb545a1407e7aca4de541b65be152baf14ef", @ANYBLOB="40f57840d06c0c89ad031e07c3454ce1483fe5a0a7a269b94afb0038379e340eac65a91417a9d328abefd95d48ffa4ac245871e5c647bf19f613822cb4b28d3cd7631790b00a8d1389b5169ea83a914cb82fa11da397ba138886ebe5b67c10a29fe24ff4c55891b1478c", @ANYRESDEC=r1, @ANYRESDEC], @ANYRES16, @ANYRES16=0x0, @ANYRES32=r6, @ANYRESOCT=r1]], 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat__ctl\x00', 0x105802, 0x0) ioctl$TUNSETOWNER(r8, 0x400454cc, 0xee01) 16:37:23 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x82) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000000c0)=""/137) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vcan0\x00', {0x2}, 0xffe1}) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x80000001, 0x80001) 16:37:23 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7138a4e5e563b274, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x301440, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000000c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) dup3(r3, r4, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 16:37:23 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) getpeername$netrom(r0, &(0x7f0000000100)={{0x3, @netrom}, [@netrom, @rose, @remote, @default, @remote, @remote, @rose, @netrom]}, &(0x7f00000000c0)=0x4ad) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x63f03a81, 0x1, 0x6}) 16:37:23 executing program 2 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) 16:37:23 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) read(r0, &(0x7f0000000040)=""/240, 0xf0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/209, 0xd1, 0x1ff, 0x2, 0x51a9, 0x346, 0x1}, 0x120) 16:37:24 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x2f, 0x4) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@empty, @multicast2}, &(0x7f0000000100)=0x8) 16:37:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1ff}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x2}) ioctl$TIOCCONS(r0, 0x541d) fcntl$dupfd(r0, 0x0, r2) 16:37:24 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x6}, 0x0, 0x6e8, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') write$P9_RATTACH(r1, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x8, 0x4, 0x6}}, 0x14) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TCXONC(r2, 0x540a, 0x8) 16:37:24 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe800000000000000000000000000000000600000000000007280004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff05000000000000000000000000000100"/143], 0x0) 16:37:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 16:37:24 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff0000000000200400010232e2b6bddb2c000100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) socketpair(0x3, 0x2, 0xa7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x100, 0x0) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r5}) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 16:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5bc74316f00c7a47}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 16:37:24 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="28eef9a98af1d4a37fef7ac4aaa148f518e891ba7cb1f696bf53749661371fac092c2631fe765064da6f920ba2fb9094b1028fecd8bb01e01920256620586e38cc330d1945967a00ecf7d3e153f8bffa2206778afac393ec5d10fbef7de36104a89130c503755a42adb10bfe8e0a744a515fea079eceb26f001d3bb3d4c6b973b43c1abaa2f8d4fdf138a17133016785725cdb559bab0dbd1c7cf59f4cc0e5d0a7c52f9777aadd216f1a4af68fd0392341e4d8ab18bd708a9148449583", 0xbd}], 0x1, &(0x7f0000000400)=[{0xd8, 0x8b, 0x3, "5bc9eb3eed04644edbd8d555b84ff95ae4a627f85e4cf318e6a45a4456bfa2ece7eaf4eaf8e6b4bf011ad46d5942053da29fb7fadd4d725bc876d397a41818c3a3d3084f25888a066d28bd8a73b3e440c7e866cfc235bb15ad665b206011d5216b8a7080945ae05ca54adea95b4b2974427d8455cf1c24e53ced30da8c87797118fb5be687f1bbd233ff0cbe3e77e14eba0d7373c5feebcfdc6adf65da42b19d83a1c53fb3fcf0f71e5d4ef6dd5d1b9ff3ea320c8783d54943efc47b8fce58ef6f45126072"}, {0x60, 0x118, 0x2, "520f984ae7319864e5c103c1770aefb770b5817f050740c3c1d0aa2d684657a0e5e023039a5c833ea0eb7eaf62e51ea790aa93cbd71ed699440aceb29ee5f980779baae9d66c2dcc238b1aa3"}, {0x40, 0x6, 0x2, "34b9cdec9a8211caf4b600783f24f85bc6c481ec537f2c4e733817ac6824292ea5a48a08baaa8eb3f2"}, {0x98, 0x3a, 0x81, "82abf04c9603a476ddb2a9e4a30695452998fc9de4e15b098b99a15e97b752fc7cb2b28a9f744d03adedc0d1100267af7cb9671db03ddcf0b983d5819a45c308a28caeb93c8cef03038b5c57b86880d3009eb84ed912d4a34ece6bda2dee6d6ec228667069bd9a847fe40e1770ad0545d0de9bb5347947dd7ede947f974373b50b008fe07a9f4bce"}, {0x30, 0x119, 0x5, "8806df3553178628973705c6372bedda1a51562fef556e55f9468add6e9ded"}, {0xa8, 0x102, 0xfff, "3b3ddfcca3d7866ab37802305b33488367ce98d7bfab78d38c1ec5e2683359cc3178c9bcf22c14ea46d1b26366dc3472dd3e5cde10749309bbc1fd53bf9a2ae825137aec630a4bb7338f1c383494cb764fa4bedd3bfaeaa77baacc6f3bfe9dfc89aaef8a7f589f8acbcc50f38480561d99d1266ad5f5b8c8421405fe8b3a332cd9783b4721d280e05311e540de0b5f8707"}, {0x68, 0x10f, 0x6, "d2c6c1176c66cfdcf461b08e6f449d4524e3294c36d3384c181e738fe4ac3b1ed94e0132fcad9a35205c6515264d75a2c405d04f52ca427f744a77702e35adbe42576ada78ffc987baca6139a363d619563924872e24"}], 0x350}, 0x40) 16:37:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:25 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="94ed5aa0f1494d3e3c53b9a4ee472941d8396ceeb588e3094918fba656792bccdcd21a90651a04b7c6038090a3fcf63a7ec9bcfde670e546cc44763789df9dd21fab8c7309178b7f7beedd430faad2bd6385925d790f0ff01fea8518ecf21efd6fdba30d270ac17a56550000"], 0x0) 16:37:25 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r1, 0x541d) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1, 0x4, 0x0, "9a1d32ba4660c32ea8343293a4c92ce7614f0f2f96d5b2dd7273e7901188e68a", 0x32314142}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8, @empty, 0x8}, @in6={0xa, 0x4e20, 0xfffffffb, @loopback, 0x8}], 0x38) 16:37:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') 16:37:25 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000100)=@generic, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000008c0)=""/4096}, 0x1}, {{&(0x7f0000000340)=@caif=@dbg, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/202}], 0x0, &(0x7f0000000500)=""/239}, 0x81}, {{&(0x7f0000000600)=@tipc=@id, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/100}, {&(0x7f0000000700)=""/95}], 0x0, &(0x7f00000007c0)=""/24}, 0x2000}, {{&(0x7f0000000800)=@nl=@proc, 0x0, &(0x7f0000001c00)=[{&(0x7f00000018c0)=""/32}, {&(0x7f0000001900)=""/52}, {&(0x7f0000001940)=""/169}, {&(0x7f0000001a00)=""/82}, {&(0x7f0000001a80)=""/183}, {&(0x7f0000001b40)=""/182}], 0x0, &(0x7f0000001c80)=""/4096}, 0x8}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x1}, 0x800}}, 0x18) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:25 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xdbf}, 0x500, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x1d) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x3, 0x0, {0x3ff, 0x9, 0x200b, 0x1d, 0x3, 0x6, 0x632490fdf1ee4af1, 0x4}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = getpid() tkill(r2, 0x9) wait4(r2, &(0x7f00000000c0), 0xc1000002, &(0x7f0000000300)) creat(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xecd7df66a6a79daf, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:25 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x3, "dd18390a5d2e649f"}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 16:37:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:25 executing program 4: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2400, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xfffffffffffffe17) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0xf79, 0xc, 0x1}, &(0x7f0000000300)=0x10) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x4, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:26 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4606000181010000000000000002003e00ffff000077030000000000004000000800000000b701000000000000ff0100000000380002000000020000010700000000010000000100000000000000010000000000000400000000000000000000000000000038000000000000007c00000000000000"], 0x78) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r3 = inotify_init1(0x400) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000007c0)={r2, 0x3, 0x800, "2f5af356a971d445af78cd14d2225d88a1337cce2dfb79565eb640ac268a7ef9c07dc4a8dfa0876bb3e49d5202609b218dd6f3ecacbf78b167df7044dbb943cc487eca5fbcfc8f8e7fb0b1cb80abdf401d8095bf0b247a660fe6ccc377d73c8892e5bd72401b7d5afe10a2a652a2271a98bcfa92ae8776570e14dbecbf014a804b6165bfa4d285a1f12dd47d23ce930f21756b3f1abad3ff8f64b4ab4394ae92882d57582f0c51367b2c5d4f4f98fdbe4f9db844f645bd130c091f940d6683db3e8d187d5209601f8ea636a125344872dbd7525a9ad9a8100029b0c7050dde69d6d325a6da1ddb46adcced62273e0a6a0f04fe91665bfc6db5a33bcec8fa3154110b87f5371379e1fa653286e2a67e0534c33ac00aaaf705cb9a86d76c1f0d0204b077cabb4cc171390c0c2aa947b818cc90262b0b664802f90aef8511c44c6f5286c8f331e6e11d8f063b9c8db540a34ca914c0b0f31e0873e97ac94b2145a5ee57729de483fdc0ec7acf9a70c0aef61f7b3bf68e582fa021b1d29e55f90ef5280a072eb5362235699c90ddd71efa28fada781359bd16cf20048de91d77cfeb42b429a9fbdbdae8867922436613197a81def01e87117f6add6bf4589f815fd8cfeeefb4db0a79cb5fd6071e03ccddbd583d5b66a28a0900770cfa3ac301ba11f4a9903abe16ac1dbb4c2c76a11b5427aa020fcb1020d28c3372b2fc4a78dd50f6be95b049c4742d272a154f016f3221b6c6ab14934eebcf3773a11083c05bd38e6a164eff62055b819113c6c00f0256d24dd493b0d0a2d3600012d9c8ab915b34a29d4d3b2233e88d434b141d4f4ef1fc83dc09662c902802b8b50ab7934a70fd3f00be318538cd8041fe4ceca8aae6d86b26a0985eda5c772d26f525efb96e73e4241a9615c4e284bf03d4fff11b9ccb1bf7b3ee2ee88a15d9e06c961aea42a7c5393510e94c9680d1cf0e95fdb7ed6bd77334ce7642e9ce533d991ba29bab5f3e51303a046c7d7a801246fac69cf795c9819e3b526187e03ac2c6204d4d291fbefcff38272cfb2d4c8a1d095610db8660e9abf492153c826ff86f0a4faedd54015b3fd861564eb890c2019548362cedaf028cf606d8803747bf23b6844b71aecf43fe1ef46d79756d14c744cb3337aae0c5b028a7730585325918d39f79d82af8f4aeb18c164f9f4e633918d315a05f333303a8378fe98cc912140f4ea35ffc8478141ce00e8a8d343e98b136997e3337000a68298b046807186a6bf9abae964f36e1ec59d013698358d03cdd0886ff99102f81df18bded734515994b606d23940f289acf4b789150756e22d7be36ecbc85ea282ef1bf7ffa9b1a2fdaa2a645de7558b7cc362f649dedae59c999bb279b35df8969a48d2e4d1e674009bcc5029cf837d55e88cb2470189ae41a75480397d255bc4ff64cffbb36a795d841538faf09e587cf7a9cb6a4b35e8224ca2fbc4420e25058cc34b9ade86183f420061bdd64de9670d237573e65c2ef9442a3ae0935e58928f5e48670a8d7c8ffdc27e13b1a83c7d4c52e52b1a8fb3427c623da39c404cf831849c2524aadb2f5240c5ef5e47cc71c65b713a2191484416f5a25a8980c6208af45fe2e44c1590c0927e84986ff6d6d840c967bced97a6d507efc6ae2e6b18f2c31137b5d207bcd383c289ce64b52b4c8a50139886264e73d5cf0ff9d75552af84d30465a2d016c47bb76ec7ab76f61fc72007d4687c3dac17a116b7e0eb79128ae5c8a93129d13380c9f4cb5cbf54e4c294d32211d585ba688e1f950e765bde89da404dcafb5cf5d1d0d3dcde23e09e5761ecec9cba54dc6ad2a03e4d85bcab949eff33ecf011ed02a6e0d745be7bdd646b4ccf4e32820ecb6cf9c7ca030f8f8b2721905860f3dbd6262ab086e0db5232231108eb12ed8db6388cbe70f16dd11479e4b20b34ae3041a2535799d6625d2d1da8453e0f6e82212bc6181da83a09d9cfed2c5d099cfb31e2969a7b701cf8124b312f5898d8d44b407aefaaea7e073093fef94a179f3467a76f1199373c7dfcc7f76b575f4916e97705b9f8f83e29e556f144d97b1084739e06914ba5563b585816edf0b639aea7bf377f6e2e0fa65647a19e8b2816f8958ca484c6b6787a59231b45bcff0a69937a5b07c37ab0d0b399d9247ba69b9c9c91df022ebb6b03579ed1a72ff86730649d99327f61030c86571b9e9f9a647f30b8ba05c9ca492f91de7dda198989ad9f8c5a3edfec48c4a0593d33434ece5e5ef53c8d351feb8c31c238ab4eaa18585c1fa3401c5bd040222de67b8238a6f2b6b1292b06ede9179c7ec52a9a3d71512c15e4618c9f6325a8c7fc2e5d6d416ee3eef203f174b56d7f4db6495b564db7361285e4e30dff6b407955ceabe886ab526ef2231c1836c0fc6bae7eac8c93f1721b43bf5e9178c11a11ec924676b199ecd8c54d867ace999b1f78829d1d921626de2797676c305a9b4b4c63039186dc1d3c4797764506407fce048f36320d2ed86c2ac2efefa94b8b80e8fd5d69d28e3c2d38cfccfec73b30d7225f5aca2a615bac9bb667715affe65c04847746bce2f7d35534a96570da3c9e3b841add367c205760aae142ecc4055a87af03fabd1a779457b6fe24c10b59837b5f18c90926dc6e8a3af390fe6566820003969b9fea293fec71640cea37a21f1a7335d70501d566ff76a0c3898da69bb2b21abc1a83f80ced3a1ff86cc790e5873a50df6c1cdbedb6bc170104308490ee0eba4f3213ed50c30cd5ce60219e518230d189663cd3df1d632489f94b4ad11db9b35acce593d572dd85c0eea5deb2572a91a508e2b5a2e0d2f5c0749869884bd58c2a08c3f8bd68a307745442a5cc6aa4fbdc65d21c981bf281e45c46e46eb74ea6c56664c6477dc40a2c5d961372ec304c9680cc0531e731b80b18ac92222bfbda6b4e9e0f624dd76bcdacb3580d49f53ab0f564922f42c362a91bd721de3cb6ac21c5cc08c4dc375169bd35f7209034ae0e545084c2ac1b31aef584a532b7f705b46595b8bb70b8e66e9445f438293ffc0dcc0477c2625bd27709709ecdadba1d9a5645ba9f7cb930e9e32b5c2465cc3b9469ba00524bbd1668bd1d10de28ca892f2dcb02086afbdbf29d35f2cd4c2cb8c2a79e338090ef68b60e825f74dd0469788c2cfe0cfa14511d9185ba0ffbb7f734abe8fb8846ff7ce8e6876ddae0b487e313ecc1b7b6e257ab2df3e61fc1a72bd9e13ee67ea25ba106efa4cbfb8b169d8277c8311ecb381ab8a548a292ed63db3ac6e88019f6cc5582ed77a8001532b70e206d94da7f7dbc8694b3cc0ab4b9196c71757c3709a5339c1847fea4604d96c18d0290e9c6c90868f98b95265d72e8a9409e282397cc16fab548b6d01dfd9e809c808dcd926909f8ea266bc79202b12025b1425461d83a415e7aa208bc9086a8f0c3d7dcf70bc14341361eca41c887441676ad2b3a5dfc1dbde875d3c369c6f8bed15e680939d1e76416a09c2d419382460a299c436e8cca57f3b802c0d2b848acd0ce1ff1f4ec52edb09179f802db7e7a6193ed73aad7ea9b48117cc2166411b8a3f5d8c266f7e9b0877ce5054183f40fefda7863cdf35bdbb294c42e8bf66dfdce9fb98b781a01388df65e2c6c9003cf4b974e81ffc203f3f029b04c90be98206acdf2e78c8d4428cc29ff2ab6d7bff0e61085bd753e311efe3c07e040d322207a32d4da112997eebe0469596c19fc93a9aabcec58ad54afddfa5c74f4385f1e16d595f7a1e87480c8cba3006a842f4c91c2650f5a6422957c5887c36c6e0fce3523802bcd95e704b687fc0df7417c1d82e32a9059b4dd1a73145b80edea5d101f4b79528bc7b953a509161871781b5943a40a733ad8d76c0959588332f5f9280ec5aa5529cd11105c3bd142cce0844d1493307bc47be5c38c7e4f3415ad31c434f100a6b484bb05e76c8738fdbacdcbc8f63195e8cfb4f6d155a5bf8e60b1cf01f845644fc08091de7fd0f0d74e9dfc214f2098e42e18939802c35295d52c20bd589152d30d6399bdf0157843d56a811be304f2547573db86971aa3b299fbacb29dd76805106c25051e0daf1c1ac45116e8e5208b18193caaa99f7fe6fe91b4c4c875f4f70152ad5260e7b0503eff479e20dc625d24d5ec38d8e0e5c768b48cd16c41d2bbd108d651870d40ecc8ef753a7c2d256f69ae2ef35ae84994b8de8ebe7cb9e3a8c2ae68bfa961ce79973aeb4842d34569867d021a852703b6f204abd70136638d33b30dd7d0eb5b44632bba6a6327728f7b2b9bc254f871c975d14814f19a4c3d17cd2be246b017cb59b3a861503b6ea2d242a38bcb3ff10ff669af2a210f7b77c033cb977d82e75310b6cbf8ae3ba3f10a288449d140b3b92feb6eba31312575471bc93511fad63e045f8dc49adc3c3acd98abab3ac23bdc558e0e86f4b57bea3e35fb587b9c5c37b6a9db773b01a56b60ec1eb9d94c89957a0882f0c0745d4a9c409732f8d5fc1feabded5c034a65c70b0542c712bd887ee85f5a15911868ffa15d9216380397cd7759aa9d5729b710ecf0070269674e240ef959b81f463e5f07485c336ca45463914c88396b6902910d728c630c1e6606d8a551c0ee4a853dde0745cdcd858197d63e967e3c1080d7afd93f566fa457c9442150ddea8ef508667fd213be52ffc34583643b4f81f3f11a3230303dd7adf21879d2e3eab2b7265c25f7bc91e3a1692b4fad4324a43a444f3c4d24fff0b5ed4c38c58193036571122a74c02b241d944d7d0001fabd05916b0a9847744610736fc8947ed54180c0f5c380182263bfe6aa2156f4c89a9e3b9f350740fe3b2abcf975bbc3bcaf4165fbf2ba9e9aca23c8336629d21159588b532fd89a065b6bd13c1b7b35ed562d632a94c342ec8af15dd9797b4d1a837cde737ce43920ebb631b9141c3874cf2ec77d01f52500188368e86000429d3fd1566843f305c2ec8b42f5461140af605013f3aad4fd4abc6e9506104372ad4097ba13ca401ebea34cfa5c531002b01ecc51d0763ab653a08120a8c96bcd0b1fee5ea695732d0c07f7a8a1c431d0f5233ab69f82e1d9a20c41353d03b215c7301c4d936e407cd3a59a936dd726be7998317e075d041e004b45191906a328b90582d09cbdecd9c8aced83759591f19c36ea1d5e86fceef79c117a271839f4aa33e45313994f4b481373b640494b880434026e6f6adc74d3e58e3b63c57e5a0f60905b8e704c9bef4e8343b3a2206b0336ce9fa72c54ea84dc996030b9d016022990eafbd63ffe05186746ebe7f06ff2867dab046ed56fd57d137cdb949b573a1a2a9fb39bcbce6199bdfd716b50c0b6fa8a6d96ff76fbdbcefc7600d2a2149b15276b293671e7aac33b56f45035d49b06404907a5d078124660c453f6f0672c672fb951e788942da1c4802a02817b13497ee5a702c8efd1606b88f52a0dad3a07b438391be5edf8080329da8ec4a0604c6dfa44e93c0e02554d60d2044552cf0a6fd14736a373c26804893a79d49db7be0df9507ed1ab3cb8603306d9c0d1838028044f9ec73ab6a59e29e409fc14a7616a30890b45e13ef98c9f05ed9c702c4e88519aac9fcc7589d2da743957015d64d1a286034077bffce2c0c0b3a41b1818d829aa4f73d930a55ff938d538b55792ea86ae8bee6261c4ff117832ecb8fa80c21ce01bbfc3aaf03a1cf2876858068b7026827e2a56988551e163ab3d622a1f85ed8d7f898d4737a028817c189f7ab87851ffec895e72ac1104c06fad406807e4b3b5fbdf0153d88819e8602f65365"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="90010000190000032abd7000fcdbdf2580200404fd03fd0400240000080010005a00000008000600040000004c011600480162003a99dabca7f75bafd9638e773ac473c79c45afa949e29a9f86f2013513fb485daa9ce285852da41ddecf4b9fac5cf824c62a8bd57b8193529f68d78d0c007d000600000000000000040012000c004c00000000800000000008008b00", @ANYRES32=r3, @ANYBLOB="08005200ac1414bb08006300", @ANYRES32=r6, @ANYBLOB="049e2fabeec7012061497b73351c17685dab9cd992c096c4c78f31c86e066810b8fd498d2d48618147be91da4b268678a3b13ebb604a1f37b3f341bb8e07089c918e3934f3d75d61a41b524f6182ec3e795d2262e50159a5c307b796da4482a0048ac62a6fc03ee11d109c2b460e382d39f7dd3869c3077e88f4cf7d6f1d0a7a126af3f5d67e7cfb260be094ac7c574b891198693e2c3851e205e94313e4c911d9e4c5d48d75b5e14a07780912d1c5085b87703f7470a1f12133b7707b107f4e7244526f267f77c8928f1f61d9ecdb1145869c0008000700ac1e0001080006000101000008000100e0000001"], 0x190}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000100)={0x4}) 16:37:26 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {0x3, 0x6, 0x4, 0x7fff}, 0x29, [0x1000, 0x8, 0x3f, 0x200, 0x7, 0x800, 0x1f, 0x401, 0x6, 0xfffffffa, 0x6, 0x9, 0x27, 0x10000, 0x3, 0x9, 0x7, 0x2, 0xffffff81, 0x0, 0x1000, 0x3f, 0x401, 0x9, 0x63, 0x400, 0x7, 0x2, 0xfffffff8, 0x100, 0x6245a989, 0x1, 0xe, 0xf1da, 0x80000001, 0x0, 0xf013, 0x3, 0x9, 0xa8, 0x3f, 0x80000001, 0x1eb, 0x80080001, 0xac, 0x1, 0x9, 0x8001, 0x2, 0x1, 0x40, 0xffffffb6, 0x62, 0xda, 0x5, 0x742, 0x2, 0x400, 0x5, 0x1, 0xfffffff7, 0x718, 0x7, 0x3], [0x10001, 0x6, 0x6, 0x3, 0x93d, 0xd4da, 0x1, 0x5, 0x4, 0x10001, 0x8, 0x4, 0x4, 0x5, 0x10f, 0x2, 0x10000, 0x9, 0x4, 0x3, 0x1, 0x9, 0x6, 0x7fff, 0x3, 0x6, 0x7, 0x7, 0x3, 0x7, 0x6f, 0x0, 0x80000001, 0x0, 0xf7, 0x1, 0x652, 0x8001, 0x2, 0x4, 0x40, 0x2, 0x81, 0x4d9, 0x400, 0x7, 0x2ec, 0xac, 0x0, 0x2, 0xfd, 0xfffffff7, 0x800, 0x3ff, 0x4113, 0x200, 0x10000, 0x9, 0x1, 0xe72, 0x8001, 0xffff9e77, 0x800, 0xca], [0x2, 0x1c2, 0x20, 0x10000, 0x2, 0x9, 0x2, 0x97, 0x6, 0x6cc, 0xaa, 0x2, 0x8, 0x5, 0x7, 0xfffffffb, 0x9, 0x20, 0xfffffff8, 0x9, 0x2, 0x2, 0x200, 0xd7, 0x1, 0x80000000, 0x1, 0x2, 0x7, 0x2, 0xe35c, 0x80000000, 0x7, 0x10000, 0x0, 0x7ff, 0xfffffff9, 0x1a41, 0x0, 0xbfc, 0x7, 0x62f, 0x6, 0x4, 0x14000, 0x6, 0x4, 0x2, 0x80000000, 0x0, 0x7f, 0x3, 0x5, 0x7fff, 0x3f, 0x10000, 0x3, 0x3, 0x7, 0x5, 0x10001, 0x8, 0x3, 0xa9b0], [0x1ff, 0x3, 0x52, 0x5, 0x8, 0x9, 0x1ff, 0xd96, 0x4c, 0x4, 0x1, 0x7, 0x7, 0x1000, 0x0, 0x5, 0x7, 0x23, 0xfffffffa, 0xf8, 0x8, 0x80000000, 0x4, 0x7, 0x355a, 0xff, 0x6, 0x1, 0xff, 0x7, 0x6, 0xe5, 0xfffffffe, 0xfffffff8, 0x200, 0x3, 0x4, 0xffff, 0x8e6, 0x26, 0x100, 0xc3c6, 0x8, 0x960f, 0x1000, 0x80, 0x4, 0x6, 0xffff, 0x8, 0x25b6d4ba, 0x101, 0x10000, 0x0, 0x40, 0x3, 0x7, 0xfffffffb, 0xfe8, 0x1, 0xffff, 0xfff, 0x80]}, 0x45c) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xffe9) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) sendto$inet(r0, &(0x7f0000000000)="455db551e3b658051580072314de07e57b6e06eb9572190548df0a0204ef5c00a9ea121305ce16aeb23e1907aeca47b1dc22731f7f41f3f74e77e3c46a785cb19f53fe123c8c39801046f1e7eeaa832af552a8ace5f524431c83ea5c2bf72d2a03dd1f844d7822bddf558057ab239b9cc90d29609910a7dc57e5443dca9b3f89bd2113be8d3a66ed2cb3f08e2cfc4b232cdde6cdf3f144eb720ee6940f0a80dcc6688873f5b311e79b61011f", 0xac, 0x0, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) 16:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xc, 0x1, @link_local}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r6}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:26 executing program 4: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:26 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) flistxattr(r1, &(0x7f0000000400)=""/145, 0x91) eventfd2(0xfffffff9, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000600)={r7, 0x4c627320}, &(0x7f0000000640)=0x8) sendfile(r4, r3, 0x0, 0xc0000008000000b) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r8, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0xfffffff8, 0x20, 0x0, 0x7}, &(0x7f00000003c0)=0x98) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r10, r9, 0x0, 0xc0000008000000b) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000680), &(0x7f00000006c0)=0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:26 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_KEEPCAPS(0x8, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="f3f00ef94d6730d29859956fb7af99709b38524675c8d8ff794a220f09d3ad46f81f35821118121f214f07a1a6f1a7c796b5f4ae7b7c63d81b3cee4924cafbefe73dc5838a75fbecf9b0883862fb3552444b609655bb1caacae9d4149111bce4cd743342fa27f68c948a10df847013c36bbfc4605c63a4a16fc6d013d2af713914", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR, @ANYRES16, @ANYPTR64, @ANYRESHEX, @ANYRES16, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESDEC=r4, @ANYRES16=0x0], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC=r7], @ANYRES16=r6, @ANYRESOCT]], 0x0) [ 3072.630123] net_ratelimit: 21 callbacks suppressed [ 3072.630128] protocol 88fb is buggy, dev hsr_slave_0 [ 3072.640262] protocol 88fb is buggy, dev hsr_slave_1 16:37:26 executing program 4: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)={'-%em1usereth1'}, 0xe, 0x5) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r1 = getpid() tkill(r1, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/ip6_tables_targets\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000600)={{0x4, @name="b07e74a774924da58da16462f5bb07a43d809a7534b119f41131514be6a85eef"}, "a7ea59067334c9c7cf1fc54de477ae28c5c9c795286985e15c8750172b5d8c79", 0x2}) 16:37:27 executing program 2: write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0', "4f00b4fd8160ffadd65f18e960af02e8e5a055179423a9ad1127fa4b70130906466afd28e77212a0d31f9961dbe4cd36232626be96c290ca21c02199079f863f00520cd0c2cd7aadc2f80ff4967ca14d30472ada4eedd21063572f69c0c4d65cd1b5a606c2c64b0c1e9b500d"}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}, 0x4304, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:27 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) [ 3073.430124] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.435400] protocol 88fb is buggy, dev hsr_slave_1 16:37:27 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:27 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x0, &(0x7f0000000500)=ANY=[], 0x0) 16:37:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x8, 0x7d4740e0, 0x4, 0x80, 0x3, @discrete={0x2, 0x80000000}}) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4000, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:27 executing program 3: prctl$PR_GET_FP_MODE(0x2e) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:27 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r4 = dup2(r3, 0xffffffffffffffff) sendto$isdn(r4, &(0x7f00000001c0)={0x7fff, 0x7, "127a80ec3c9693506af59f89b23b4b93b7a83781247e6b1e"}, 0x20, 0x40, 0x0, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) 16:37:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x40050}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3073.910129] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.915282] protocol 88fb is buggy, dev hsr_slave_1 [ 3073.920492] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.925566] protocol 88fb is buggy, dev hsr_slave_1 [ 3074.070147] protocol 88fb is buggy, dev hsr_slave_0 [ 3074.075306] protocol 88fb is buggy, dev hsr_slave_1 16:37:28 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20001, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000040)) 16:37:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r1) ioctl$TIOCCONS(r0, 0x541d) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) getsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 16:37:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = getgid() keyctl$chown(0x4, r0, r3, r4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r5, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:28 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:28 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:28 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe4c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x49}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r4 = getpid() tkill(r4, 0x9) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000080), 0x7}, 0x400, 0x1000000000001}, r4, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:28 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41010000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x230, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xfffffd4b, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bfb3d19}, @TIPC_NLA_PROP_PRIO={0x1, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x2a}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x280}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x19}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4004821}, 0x4010) 16:37:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r4 = dup2(r3, 0xffffffffffffffff) sendto$isdn(r4, &(0x7f00000001c0)={0x7fff, 0x7, "127a80ec3c9693506af59f89b23b4b93b7a83781247e6b1e"}, 0x20, 0x40, 0x0, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) 16:37:28 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b2f, 0x4) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x2f) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 16:37:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:28 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) getsockopt$inet6_buf(r2, 0x29, 0x2c9bab7fc2ae9ff8, &(0x7f00000008c0)=""/4096, &(0x7f0000000080)=0x1000) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4606000181010000000000000002003e00ffff000077030000000000004000000800000000b701000000000000ff0100000000380002000000020000010700000000010000000100000000000000010000000000000400000000000000000000000000000038000000000000007c00000000000000"], 0x78) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r3 = inotify_init1(0x400) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000007c0)={r2, 0x3, 0x800, "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"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="90010000190000032abd7000fcdbdf2580200404fd03fd0400240000080010005a00000008000600040000004c011600480162003a99dabca7f75bafd9638e773ac473c79c45afa949e29a9f86f2013513fb485daa9ce285852da41ddecf4b9fac5cf824c62a8bd57b8193529f68d78d0c007d000600000000000000040012000c004c00000000800000000008008b00", @ANYRES32=r3, @ANYBLOB="08005200ac1414bb08006300", @ANYRES32=r6, @ANYBLOB="049e2fabeec7012061497b73351c17685dab9cd992c096c4c78f31c86e066810b8fd498d2d48618147be91da4b268678a3b13ebb604a1f37b3f341bb8e07089c918e3934f3d75d61a41b524f6182ec3e795d2262e50159a5c307b796da4482a0048ac62a6fc03ee11d109c2b460e382d39f7dd3869c3077e88f4cf7d6f1d0a7a126af3f5d67e7cfb260be094ac7c574b891198693e2c3851e205e94313e4c911d9e4c5d48d75b5e14a07780912d1c5085b87703f7470a1f12133b7707b107f4e7244526f267f77c8928f1f61d9ecdb1145869c0008000700ac1e0001080006000101000008000100e0000001"], 0x190}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000100)={0x4}) 16:37:29 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r4, 0x1000, "b25f0d8f9512b91e480795fcee7a3072f8bd086fd7ea5cc5c5d6be13a4368d7075cdff8098cd81d894e1c88c9777bc32cad56085b0d6d88787e6351d770758e1c2a46a1a604a327c25f980256c4aeb1a07160cf34a9ca95247e06710567acb36fb533317892b1504f80d80b4d4fedac14b183ac44cf43aa989eaa8eae924d56e5bbba896249bd1671f7ab68ade03679fefede1357116c03fe7fec12f84dcc060acfbaf9744b8975bbc490e0e77ca4514dae4396367929185474d3aaa60036d75c1a3807da23675657cc186d30765d69067ac8c1f8b61c558d1d86373ffc39ce4a876263f913103cfaf8a943073fa7e187bee905e2a607fb13e2cda206aa620b3ac8e54032c65d751ffea926b18c5352fed1b6b30a98d066ced210632efd642794d60b70ad6213479f5fe43c3baeae02cefd050f0384d24548f5e1710172123a02c1cf917c60d5ff6afdeaa23193f95a0850fb26a47fc04463c9daeeebc6336e9a210945034ef1a9e291bea27438897940120cece20a6642de6187a8184f6079b175e363f31590bd5347e3a0945421baae83af367cb2a0b0c6672615969759d14751b790c69f209a99a88a9d481fd6ab9cabd6774dee1db5cc0625eefb2298ea2c32bce76a74b01306028c54b77d2d19871156b02095ae66ce89265247cb27abcaaa0e4418f9c830a0c77f69af7de9baff923a037bfb693f10a2434eff1429694a6eb8dea257e40d07987e55a54c0bc80aabb5ebd7f5ac34bf86355cb917df545d3ac0eea4fd12d7707c4d9289ac20e8c724237a32d2b1524487a21588c9287b6ad22994b9ea2b5ec5d3b8086778dd29cfceea421a95b8e8a383b41f65bcf124700929e487c001b4d4ed19a9c68ecd62ea6aa806b3b91b4e075e82e8f5dd0f80c6201a1669ba17ef80fafa412f94028d27077e4e7160ae193bb699bb2109e23dd4f525553b1fda63005e798cea35490a42b810ec3a81344518a0299004e4d33660cfed4f0a0f3e6d469411732ed8dead9bbfef01a6be1f58b1b0812ae704d402d5419ab909edbc106e79f1d4328e35269aa8cd6555850db6a08cda67a77b83f48aba8bbe4f05612503a1933acb936577179e04ff57cb703881eb431465ec1367e242a3900f4f5bf3f0d7f365d31670e5df25fcb994c1529fe506a37d8ec36a6b6039981c8d430fac5afdcab95530bab02a53e80c4ac1e54f319385bea2d98407f2b50f1d08780ad8e74caa659bc91fe00636cc348d6836c086e55038972ab66238f5eb4578d6f0baadeb8abe97a3efce8dcb3f2d9b3bff60e5726c0bb341ce055ee6a8fabf475009172668cb4f2a53ea9ed02bc9c4fb644e3ceb3d65432da3e32b5bfd143b3c3b16e6c7429dc88e5e13486daccf4970421ccece4c29b29f5280138f23e217476b72a09551258f08bf82968478077baa9e7287849f886b9c5f8c7852398404862fa76f2b2a22878e1710a05131d99c6cbb2d2b29909e5d547d91a9d4857f6417ee864b1e3ffa9193059a7938f2d435bdb62a8d273a3b20fab24b8fdd6a15b36cf1f367646052fb787e6a0daa3d0407f682105e9e4cb9cd7eaa051ee3228a642eceecd7afe93afaaea18eb3b8a0e712b4acba6f1ca9638d7b1d7d2ac7256131a03fa74cd487d9e4b8138d866c602e182a29453240010387b02f4aa0a75fe907c68ac5349d8ad384807b8dd43938b380682ff39ccb35ce88404ed3f3b8b4b399d6a0393b468503f410808e4dd352b0dd568a326569b0486ac81f243362741679616fd307c91f7bbdc52c799791cd9542c560a7393a40722f61468487bbd9a327460daec1011189cda4969234893e741538db384788bb3f076ab477e08d904bd8daca01c13c9cbf673bf2195198d62c2d83609036dc3926ff75a5dadc03f20cb1e1de14947efb6cb966215ce45d42cf9ac123928041dc17ce7f7d092489588c19791b85c1e1d9085d32e5b19323e28a55d45750d81ac45f171e1683c15748b0267eb8ad9252827c79fe50ec932780ba22844024ade042169d5f2373b71e78fd6127c68442fcf956443260499e88a39aaaed05cc58ca5c2dad08986e42e356312b8b4117404730c187a830551abffd421bd0a7371e8b8f1c2eaa72c9743928db87de01282df02847fc5a96acef72801f5278c2554573c4d2bd7bda7b60309c7ceca2de77dd92059f9c835bd554b385aeae8b944a8a0e7654a76197c1ee31ad79a0404fb1ff9a1683cd657e0ce58d4ce9bc1af798d00d565f5eb9cc1598757aed739906012587f1c83faef83c6f541b6db7506465a92407670908e2a9af2de14755ba6882cdba645395d5801d5a5652f4f8d4a646bf5280365ccad49f8628a35692445aa26f181565e21cb88fccc43b8e6ddc9935d4cc8db3773c39e0ca0d3d44272487a7891e334d8f1bb9211df42280e3f33825228fb6c6c4ee378f3cc11317b979d9ed7c41f546dc4e874c26e3da78f5d845a023e9aabe4c95155b1c30212ee25b87e40ba65573c432380925e45740f5b11333782f03a0081b9537444f5b97e5ed4e06e2d05749632909aeb498f41ce51c966b4303509ddfeb674f9e19672f855eb4cf910f026a6527efd5a540e28ac02a82b51bbfd2814bdc89b16f59a3c64b1bfe0f51ef8914147b3363b7661acdb2d4403f4b760a112976338fe838f732b3c4ff3576baadc51baf9b1732eda1f68020f2a00b88e97bbe4a5d609afa922bcfc2d667734c11e7625ee436285c54c0ea02d4817ea83f04db87f78483bed0fd704bf13db4c0293719a8892e3e0cdcd8054ab707e95535f1bcfc14edaa66703c0a0f790a16fb880409aa9fdab31f4b78ec10dab20840911c54e2d258937fa3f0e7ae75d7f2b66624bc9d81a872acfa53b3327035c45dbcf2c2f7b5ef27aed1c868cc355630717547e2786533cff7da0684ebb996c13efdf441fb975c921ada2fa82623e6a283d4e8360030720f8b5b82f02c85d34b201b3114e7f1641ece1c6a58c152b0a53407dedbe2897923ef78f63f0d61438316c2368feef693a443e30760815c1dd1510596a4855b88336de795be480f7943ed0f5526a3618958d0674246dfe2e24a220ca6d13c5742fdd7e44e46c75bb674d9ab60a12e747cbba349c869e0140a1960607eb3d3b456e89f2c885dd4b19a61cc3722400c42385c2f5422926dcd84b24db8dbd74d197f340d5b6900a046285c9721e4deee4a25f35665edbd46b339ca1da683290d729f2cdefe01dd80e45a947069dd50f68e4bb5bfe111783ada0954079b4c0e8c18c3d35a3fb5bba0e157d5e7484a261a0791f4e30f93806ed935e8c685da42d937ce306c93c007fdc657c05d42118d4b6b5cb220ba4dee88009179a093ef734cf11748760f121b7c04cadfa8e41fea6119cdb88f875ee37d145413da60256f899dab3c9860c81406ecaf1131eee5721bd4e9a1aa9d6ce4730790785647748d168906da3b6b277cd984fea21ca348836afdb69ca19e2f6a44d6bda5fdedbfebd4922be2c660fcacaa2f5f70138199e4e753ac9fdfd1d04d4d1a28451f8142c1eb237525fe15d453851dd90d9bb9771634ada479c6392b3be717b9747e8e9433b314627248175fe081d821d20922821b2091f65dfddc7e5dcece991acdb78375ea24cc588297e66c3f42c35e89f948482369c33a539639b534ab08536deb41f4c5f4bab1405bebb45b10e17689d2dacd1521db3dd46d7b6e8dd5c90e26720ebf0ef3edf9ac846d705ecdd4ef36a356d7392c18b61a3e77ee50d2353c54e0c6884fa4e9b582960c4a9d13e59311dea21106e62fc606c818fe37ed9f32f61a14e5b28dd4750d3d9d897a4652b093976c6c7e7a97d4f6a5b3f8df8a3a32a9fb7f2b0ce421a615a7dd3cdb8859d468347d9ed278367fc5cdc17df8c800a075ba261f406f971a877590285cc65e055464b7e633647c558d406ca4367757fb0a429aa37d77ab8c5e148ff287ad8c931fdf2fc2b83fc005bc00813ff48be1924277e655cf877a957a762a530f69206541f0078fc82270ebaca52a5429b3f5110755d0955192adc085cca6da0b6d079f8542ba203eebe811272e09326784eb0f2d0d0be84fa45eaa3be64b0c42d87a496803d2f53d5aa9addabdfc985a5811dc8a72a1e2fffd0f72e5dffa18dfb8b81c84af16e09fe199ccb526166b23c30cac18fc118b48c5269c59d6c006c48fbdec75179760510f30052f4b1c159a0bc00344730aa95d85b31de408c13ffdaa59d316b9d5e044ca9ca12d748b5a413f9c34348d93f72c8da4ded09de1d86aa7e9329f5b3c31e42a1131a7e45a033fed4ea45cd8e1ce6f4a4ea7b0a4cd3639351974ae52c605a124144d2a8d8ec4c945437a70dfcb0454e4128676b8bd2b6f540c0513dc6ccda97c275a774ac3676d27be4fe694c1e2a33d487ef18108af7202b190da7e7c0533060c6409b0f89de1b4e1761e19867d34a16e2038770e9b0a9966f421af183c8a35f24c76aa4419caebf33800eb89bd19f9a32c35c11a3bdb1db69bd5d2bad54cb33753092f952ec3d80c1607c693ecd55a92ea28a0da618c0549868ef3c926bd13f2fb09c5354ddc8d9dd46e83c6a6643ef8ec898ccb7ad37efaf6a6ab5a33d5764bdd5c5bf7120232e6bec3ed4225853e702f3739bf286e26c2be02e6ae9add4c43bb96e99c19b609dadf5cb440eecfc89f1e7f357dd45982add23bb9356039072f355d749d9cb07367b3702d8dc2e9c2ca29e507ba5a4d2319bbbeee6e9d8c8b53e8544836a5f3600471bf39fbbd3d4086aec00763103dcb3d12a49e7b05571f82c5cf5e353f26da0dcbd36521e98cee826a8889a3803b7e57f1554dec3ead04b72a30b9a6f326ec2ba97c07f4e7b3f4db7cc2a0fd4372fb414538086b41ef9ad55fd1602543ffd02ecdf1b6680c67ea83bd2fa009908bcb778168c1f6d2c8bd6bba0821d341f6670466939aec08db0bce2ee144d1881646c6f5e83178f3f10ddcd39a862515c2e55b7569589e4a30e4e931bd4674c6caba4f6b5deacdd2172f0b35455d94d2eb7ad2ebaa1461e75003e89d8266f050a963f65fe6f41491ee0fcdce698b5b07d01985f255466292e5fc15034e1ea49b371a468e7d560dd28d7673f79e70520b99e9574e4942e58b1b216a24763610a14ddc9293dceb7befd74e822e832a0a930d7c7f89eb966cda4f95c7436a9c947e64305eac1ea97ac31d912bbce8174e6cc58ef8c8d110423122bf9b2dd2ede5164722f13f85e8d5ae53eb5f52c796085a7b213b37d9f9eb1e7f2819d6d0ea1f9756b170f93c7dbb9b02745e8d7e183dfb556d3185aaef3f3b7426ed943116bceddb5d6b3605abc7664edd4844d9355eac74198ed7e161fe92fd943a02a4b4c2003389813148242ddb0d6847e251527538aed6d05721e1c7933cba1923d62fcf20d824f151ef634b2f0b52fee262c7b4ccee374854d3bd9a78d0e6ec574b24f62e86cb103cadaf8a380931d9616f3520a6ce2dc91a6bbf7b93010da5ab215d98c0326c975a34e7edc2d75eecf11e125fd6ab28abff482dda4ba8765cf163f0fe5425ab5eab4320f6a5d17ecb14b8082944e1dbf3cec99c6c5495d7cb10b4a2619b8fdf3aa7b73fadcecc76a7ef661993d8764ba4a079719602eeea8a1f5a2ab63615a843efd644ff322e01edd93516193671547d546e6e67387994dee70711987969ad6e86c3872ddc302b412e5de819e3d9f706d73dfa938b6b1a4a1ae5c678d1a7c55eb6d05ca3de2dd2e41b62ca08b1d0624782e7a02085c5812567926ae301041668391928b4905098641"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r5, @in={{0x2, 0x4e21, @remote}}, [0x65b8, 0x6, 0x401, 0x1800000000, 0xb2e7, 0x5, 0x9, 0x10000, 0x4, 0xff, 0x5, 0x8, 0xfffffffffffffff8, 0x9, 0xff]}, &(0x7f0000000180)=0x100) pipe(&(0x7f0000000000)) 16:37:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x20) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000340)={0x0, 0x4, 0x101, [], &(0x7f0000000300)=0x4}) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000440)=""/192) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/182}, 0xbe, 0x1, 0x1000) 16:37:29 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r0, 0x541d) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r6, 0x6, 0xfc01, 0x4, 0x7}, &(0x7f0000000340)=0x14) sendfile(r5, r4, 0x0, 0xc0000008000000b) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x352}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xaa, &(0x7f00000000c0)=""/170, 0x41100, 0x4, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x5, 0x1, 0x3}, 0x10, 0x0, r4}, 0x78) ioctl$LOOP_SET_FD(r1, 0x4c00, r7) 16:37:29 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xf3a5bb0317806e7c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2e}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xe6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x87601d0cb70cc0c7) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe7806437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e000000001801020000000001ff4510000000000000000000000000010000000000000000"], 0x0) 16:37:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x72, 0x1, 0x6}, 0x10) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r5, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x44, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x2, 0x0, [0xffff, 0x3, 0x3, 0x7, 0x9, 0x7, 0x8000000000000000, 0x800]}) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000440)=""/227, 0xe3}, 0x8}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:event_device_t:s0\x00', 0x24, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000300)=""/5, 0x5, 0x1f, 0xfffffff7, 0x4, 0x0, 0x5}, 0x120) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:30 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffff0700000280c289030086dd6076605100680200ff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020860c596ff07000000180102000000ff03180356a41778120494edab631c3e0f90007605000001ff050000000000000000000000000001f5c42f85d4962068f4ff"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x50bc82, 0x62) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 16:37:30 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000600)=0x8) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) recvfrom$inet(r1, &(0x7f0000000640)=""/84, 0x54, 0x20, &(0x7f00000006c0)={0x2, 0x4e24, @rand_addr=0x1}, 0x10) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) splice(r3, &(0x7f00000000c0), r0, &(0x7f0000000100)=0xc6cc, 0x5, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x516}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x1, 0x20, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x7, 0x2, 0x0, 0x2a9cd6d77ea4692, 0xe, 0x2}, &(0x7f0000000040)=0x20) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000340)={0xc, {0x3, 0x7f, 0x7, 0x8}}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:30 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r1, 0x541d) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = dup2(r2, r0) keyctl$session_to_parent(0x12) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000600)="14f7611894e1103a73a02df552fac80bd5ebb09d5a09e3a715ae48ccbcc842a9dd43d4f8586fbce8f238743b47deaa61e8ccc766f153472bd2c7dcae56766dbf77ee0f20bbbd23846649b240ea9f227eed7d388a831705c764314c7189e88187ba89a530bff0509191f9b205a75fba2344481b60e338d881f17c62c858021c0c007624c5b42ac222e8ad81ce07789c791437cf07e0a33bc9e6675222f2d22e2d6acabc12b6d38b6e5f9b0217a540055c7a657ad88bebde7100fa07a9cd4815228ae556418339b1e41490bfd7d24c338a583faa48fcd9c33ecd274d9215ddbd", 0xdf, r5) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000700)=0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r8, r7, 0x0, 0xc0000008000000b) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000740)={0xfffffd2d}, 0xaa) 16:37:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000)=""/61, 0x3d) ioctl$TIOCCONS(r0, 0x541d) 16:37:30 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) sendmsg$kcm(r0, &(0x7f0000000dc0)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x3, 0x1, "354286d036facd4a0e4a33197c32036afdaac9b542cbb57097e93b1a97e7d25df76c44beb02de593113e00f1397deef33c854b5d32e257786f62230fa1bca6", 0x1b}, 0x80, &(0x7f0000000b80), 0x15a, &(0x7f0000000c00), 0x190}, 0x4000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x120) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14, 0x80800) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000800)=r4) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000a40)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x334, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x154, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2ff96136}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4616}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf878}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000001, @remote, 0x1cea}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @empty, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2309d069}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa27c}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7b68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x8040}, 0x4040000) 16:37:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:31 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 16:37:31 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x180, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0xfffffffd, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x6, 0x1, 0x83}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x200, 0x0) write$P9_RWALK(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="570000006f000006004aaa65731977514a7d4dae5884cde11c4002000000020000000000009602d9000000050000000000000008030000000500000000000000800000000001000000000000000b4a3e209aa86d421f2503000000060000000000040012000000"], 0x57) ioctl$TIOCCONS(r0, 0x541d) 16:37:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r2 = accept$ax25(r0, &(0x7f00000003c0)={{0x3, @netrom}, [@rose, @remote, @remote, @bcast, @default, @default, @rose, @default]}, &(0x7f0000000440)=0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x20000002}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xe09, 0x7, 0x8, 0x9, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r3, 0x7}, &(0x7f0000000340)=0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x35f}, 0x12000}], 0x4000010, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r5, &(0x7f00000017c0), 0x199, 0x0) pkey_alloc(0x0, 0x1) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0xe8, 0x8000, 0x7f3c6813a67c405b, 0x0, 0x401}, 0x0, 0x0, r6, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:31 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090d76dbf5f17c2eb50ff182288e21e0000000018010200000000001803007605000001ff05000000000000000000"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x2, 'gre0\x00', {0x5}, 0x6}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)) 16:37:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = creat(0x0, 0x0) r3 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0) r5 = accept(r4, &(0x7f0000000300)=@can, &(0x7f0000000140)=0x80) socket$unix(0x1, 0x5, 0x0) lseek(r5, 0x8, 0x3) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000100)={0xeb, 0x200}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:31 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$FICLONE(r0, 0x40049409, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:31 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffc839496f28cedf9c11170180c289030086dd6076605100680000fe8006437f050dff0000000320ad88fffe80000000000000000000000000000000fdffff0c75e6e3de29298600feffff370f0000000000000400010000000000f1f411840000040100040100860090780007020060c5961e00000000180102000000000018030076050000000000"], 0x0) close(0xffffffffffffffff) 16:37:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) ioctl$TIOCCONS(r0, 0x541d) 16:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2004, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x7433447d9fe790f4, 0x9, 0x100000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0xc0000008000000b) bind$unix(r0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet(0x2, 0xa, 0x4) sendto$inet(r2, 0x0, 0x40e1060590cc314f, 0x10040011, 0x0, 0xffffffffffffff2b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0), 0x4) r5 = getpid() tkill(r5, 0x9) r6 = getpid() tkill(r6, 0x9) r7 = getpgrp(0x0) r8 = syz_open_procfs(r7, &(0x7f0000000a00)='\a\x00\x00\x00\x00\x00\x00\x00c%\xd0\ak\x9ce\x00\xbd\xf2Z\xdd\xf9\xa6s\xa8\xab\t\x8dE\xd0\x00\x00\x00\x00\x8a\xf2\xe1[%\t\xd3@\xb1$2Iv\xb8\x8e\x99\x8aig\xf8Y\x15\xc3F\xa2\x9eZJ\xda\x89S\xf4p\xaav\x8d\x91\xda\x11\xe1\x81<\xabq8({Lz\x0e\xb6EJ\x19!c\x9fw\xb7\xe1q\x94$\xaa\xf4~\xba\xcc\n\xe6\xd6\x9c8@\x03\x96CU\x00\x00\x00\x00\x00\x00\x00\x00\x97\xb9\x94\xc4zv\xb1%\x8b\xd39\x1dgc\t\xfc\x86\xfa\xf7\xa04\xbca\xf4\x89\f\xd6N\xb6\xa7\x9e\x19\x94\x7f3u\n\x1b59\xeb\xf4B\x93\x7f7\x1e[\x14@\xe0\x1aw)\xeb\xc5\x94)\x8f\xb6V\xa6\xa9\x02\xe7P\x8c\b\xb4\xe8\x96\x06\xeb\x83]\xcc\xc5\xec\xf0M\x19\xdeIg\x93Z\xca#r\x8b\xfd\xee\xe7HPN\xabU\xb6\x85\x98\x84\xd3[\xe2)$\xed\xb0q\x11\xb6/d\x04Z\x9cE\xba@\x9f\xcf\aJ\xd7\xcd4O==\xf3\xc3\x1a\n\a\t\xa2\x9aUhl\b\r\x9a\x1e\x93\xc1f\x9d*\vV\xe55\xbd\xf5\xf6\x10\xeb\xc0\x83S8\x04Yp\xea\x95,\x1f\x8e\x9dnp\xacT\xd7\xf2\x14\xab\xbcd \x9a') preadv(r8, &(0x7f00000017c0), 0x199, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r10, r9, 0x0, 0xc0000008000000b) ioctl$KVM_DEASSIGN_PCI_DEVICE(r9, 0x4040ae72, &(0x7f0000000640)={0x1, 0x1, 0x7, 0x7, 0x2}) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0xd39}, 0x0, 0x20, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mount(&(0x7f0000000700)=@loop={'/dev/loop', 0x0}, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='ntfs\x00', 0x124040, &(0x7f00000007c0)='oom_score\x00') r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r11, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x501400, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000600)) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@null=' \x00', 0x6, 'veth0_to_bond\x00'}) 16:37:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x88801, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1f0, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6960}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3078.070132] net_ratelimit: 16 callbacks suppressed [ 3078.070138] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.080248] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.085397] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.090527] protocol 88fb is buggy, dev hsr_slave_1 16:37:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:32 executing program 0: r0 = socket$inet(0x2, 0x6, 0xfc) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x5, 0xf45, 0x3, 0x5}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0x7f, @empty, 0x20}}}, 0x84) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200001, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000200)={0x2, 0x46f, 0x100}) [ 3078.230137] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.235263] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.390149] protocol 88fb is buggy, dev hsr_slave_0 16:37:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000640)=[r2]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x40, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @broadcast}, {0x6, @dev={[], 0x1d}}, 0x2, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'hsr0\x00'}) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc2402, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f00000002c0)={{0x2, 0x1, 0x8, 0x0, 0x7}, 0x1000, 0xfffffffffffffffc}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) write$P9_RSTATu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="6800060000000000004d0022000501000004050000000400000000000000000050000700000012000000f900000000000009000000000000006375726974790900656d317070703127000800736563757269747906003a6e6f6465763ed3148c4302e612c6a4805542e476", @ANYRES32=0xee00, @ANYRES32=r2, @ANYRES32=r8], 0x68) 16:37:32 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) epoll_create1(0x80000) 16:37:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:32 executing program 4: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xcc3d4a7819ffeb9d, 0x80010, r0, 0xc0000000) [ 3078.870214] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.875377] protocol 88fb is buggy, dev hsr_slave_1 16:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000008c0)='cifs.spnego\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x200c00, 0x0) sendto$inet(r3, &(0x7f0000000380)="b1f7e73c6af38cea6cd4ec4152a5bb4b34081b77340bdfaebbebf7d9348de87d92ed445e62003b5828ca535d4df98d97be3a15a756906daf3e94d807ddcda3f65f201dab30c21cbc1f6b3ed43faf20df429e02172cc5c221086b95bf6923a204ecde7d56433051ecda66f8b10bf2e438ffff94a3b0af507cada510152259dc014b97ad5cb0838a445c06b122afdbd73a2a93fd9a132df9e9127890a17894519163ad1d647ca37f75f34ec3ac45b3af226b", 0xb1, 0x20000000, &(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10) sendfile(r2, r1, 0x0, 0xc0000008000000b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[]}, 0x1, 0xfffffff0, 0x0, 0x8048040}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000001142cbcbfac65dc2c1a6e4245559d0c3f41d9300c1309f6206b0c5e1e1c74c6badae69f5b20505a165dd8d95718fcd2e8a99493f4a6c1f3918aa9e288a1101040000b69990a00fac32fd79abbdb8df8202ab38c03c92e6952f8ffb873ae4d6b9f6ec3cae3409775f82c405035618223261f0d02bebb8ea4adf10fca75782c225e32374ff8921c088e824ea941c6cfdec3b687177ab539efa9048383862b13d52b6359cccc2fe2419d6c522b9b9f209b2c5c07d9d5fda2a8a80537927248b7edee799db1060cf", @ANYRES16=r5, @ANYBLOB="00012abd7000ffdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x20040000) r7 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r7, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000, 0x0, 0xff, 0x4, 0x40, 0x1f}, &(0x7f0000000040)=0x20) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100680000fe8006437f050dff00000003000088fffe80000000000000000000000000000000060000000000000728800000ffffffffffff00000000000004000100000000000000040100040100860090780007020060c5961e0000000018010200000000001803007605000001ff050000000000000000000000000001"], 0x0) 16:37:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x1, 0x0) ioctl$TIOCCONS(r0, 0x541d) 16:37:33 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x880, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x6, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:33 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') syz_emit_ethernet(0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYPTR, @ANYRES64=0x0], 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 16:37:33 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r1, 0x541d) [ 3079.111949] audit: type=1400 audit(1576255053.192:10657): avc: denied { map } for pid=5987 comm="syz-executor.4" path="/dev/sequencer2" dev="devtmpfs" ino=563 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 16:37:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x5000, &(0x7f00000000c0), 0x5, r2}) creat(0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x436000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000300)={0x80000000, 0x0, "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"}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x75}, 0x2) 16:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x800, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r3, 0xfd, "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"}, &(0x7f00000004c0)=0x105) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r4, &(0x7f0000000100)='net/netfilter\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3079.670145] protocol 88fb is buggy, dev hsr_slave_0 16:37:33 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) r3 = socket$inet(0x2, 0x1, 0x0) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@random={'security.', '-.proc@\x00'}) getsockopt$inet_mreq(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) sendto$inet(r3, &(0x7f0000000300)="143cc27fb9050c66a2245fbb60817cecf090a4afb9ea76384e8d7e3173109d51aee5515de7200baa8421d5ffbe238f97142eed9d5cf2a2036cfb134fc26470ee481cd28f320065306bd3ae6ce54dde374ff97c5428a4caa10d0dabd977a1f3e77d8200bd7676656e521722595992b8d7be97f50d8a081fe9ba9dc2a74db34cc28315311109e7a7878a77693cbea8a4f055b88eacd48073a2273ddac4e271db1be241635133fcdc8a6faf1cfa", 0xac, 0x4000000, 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x80, 0x2}}, 0x14) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='\\[\x00') ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2005, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x6d4800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f020000000000e3e30001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x411002b8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x8, 0x400, 0x3, 0x200}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 16:37:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/\xd8\xb5\xd5<\xc9\x02\xec\xbbg\x00', 0x401000, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x81) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x9, 0x20, 0x1e4, &(0x7f0000000100)="40ccdce5397841feccdb58670654f10843eea5e42c1c635a66fe80b9ad0879b9529e69f6c32c5986657803a7b93da70aa8eac9e373ed4c6d86274abdfd6b3397716ebe7ebb71bd0f99eae624937e5402a227c98525d7d591efddaa4c328fa79e959ba75cb7005b888fee417daaf6d241fb31f6f69afc00a284750cc47089b422398afc005759aab7f0763ce272c49e34fe0406518edcf1c05a938e3f1a176ece57277530b9f6f561e70cf878809a8ab479e119aa998225f857721c7f99cd671cb80aedfe532ed09f5401189cf98a4365d162161a89e032f5abfadcf0cbb8de17213775b43c0c8d806c1495eff64357f6083d59c2d728988a81e030ae5d413abc7f51ede5de6b537dc7d547ad849a344169f6705d68a29ab5c874afbf94f983c9de25434c3d04d8c18e6e3f72129328cb28c24bdcf15b77411a59d3c6539ff3096461333dddf83784a127e2226dbf91bd8fb42580cc92ea00974838632a7ac64e894e21a6d133c883114654d67f9c0984de6164b86df0a759a8de4c82fc05b76e638758b011fd5fabb7535d415534675c41f1128422490b7d6d6ece7c131effa88fbb3128c77d02fc4f0d94c24ea2f708e3f3f9f1c4f934ca98aa55b8a9cddee9b44c93e791330ac014b2a629316623b52a19d948b263c210b3a54547e5bdb8c7ccf6c845d99037f727a3817db32ddccee87e74ff57187addfb053cf505af0fc3db02b92e3e4404220218baae3a9d1160c8e8cabf5ffdb21d52ad3af4fbf89a3b901d6618b0d6afeec157f5fc029060d04fd2a3553c3cff367523715a533c74a1c3e16086d97bee24a23dde508a040f764ecabdacfb90361a033cc56a1859f7d28a6b995ef90d91b6dbefaf3eb71b820a3d2f334dc2348d2f82910001dff8565c23475728e5c6760cd1ac8605c0a30f5f592d6acb9e5d6be6d302105bad88ccd8cb006fcef5df59a568549362fa6721a2d0584157009d0ff2daf959c651f6418da48a4fb0f11f81c3b8da27ffae7b0eda1bab432de491d68f36217617b3e5895c3f261a30a15c1bb286f087b70b84f2b7cbd3485622cb50918ab5e29b9422fc34f55eae2ef64c7962eaf47ebd90906488a5f5ac52b0643d5b941f98547ca2b9c96ab5e61ded309c061e6b49337f3e5d6b9ea637eff8e3cc5ae99d47c0b4e0a88108c587df61c9bd6c4b0a13679dab327cde1ca337af71067005d3ec3c92c5c08fc73bb09c184f0dfdef4aea4a054d9a60c8fbc9010193c3592b8baf43383be5602f817c70519af61c9dc204139407c47e1f6e2448845d089165a572d9a5b3ac74c18c6a48c4d5e20d0db6247e1b3f455b8df1803b60dfe0f1eda0b8bddcc0b6aaf0f1fe138ac92120392ed0d8635b7a1fee0842bda0987929a2045c240466ea7261735c542a443d8de39363cb4b1b42cb4e51ab3c79adda8821556c9bd60b2c82"}) r6 = getpid() ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000580)=0x6) tkill(r6, 0x9) ioctl$TCSETXF(r3, 0x5434, &(0x7f00000005c0)={0x4, 0x80, [0x8000, 0xa57e, 0x8, 0xffff, 0x81], 0x200}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='gid_map\x00') r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0xfffffffffffffffd, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) sendfile(r4, r1, 0x0, 0xc0000008000000b) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x8, 0x7, 0x2}) 16:37:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0x4, 0xf7}, {0x1, 0x2}, 0x80000001, 0x4, 0x3f}) 16:37:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x75}, 0x2) 16:37:34 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(0xffffffffffffffff, r0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x2, 0x2], 0x2) ioctl$TIOCCONS(r0, 0x541d) 16:37:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2004, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x7433447d9fe790f4, 0x9, 0x100000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0xc0000008000000b) bind$unix(r0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet(0x2, 0xa, 0x4) sendto$inet(r2, 0x0, 0x40e1060590cc314f, 0x10040011, 0x0, 0xffffffffffffff2b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0), 0x4) r5 = getpid() tkill(r5, 0x9) r6 = getpid() tkill(r6, 0x9) r7 = getpgrp(0x0) r8 = syz_open_procfs(r7, &(0x7f0000000a00)='\a\x00\x00\x00\x00\x00\x00\x00c%\xd0\ak\x9ce\x00\xbd\xf2Z\xdd\xf9\xa6s\xa8\xab\t\x8dE\xd0\x00\x00\x00\x00\x8a\xf2\xe1[%\t\xd3@\xb1$2Iv\xb8\x8e\x99\x8aig\xf8Y\x15\xc3F\xa2\x9eZJ\xda\x89S\xf4p\xaav\x8d\x91\xda\x11\xe1\x81<\xabq8({Lz\x0e\xb6EJ\x19!c\x9fw\xb7\xe1q\x94$\xaa\xf4~\xba\xcc\n\xe6\xd6\x9c8@\x03\x96CU\x00\x00\x00\x00\x00\x00\x00\x00\x97\xb9\x94\xc4zv\xb1%\x8b\xd39\x1dgc\t\xfc\x86\xfa\xf7\xa04\xbca\xf4\x89\f\xd6N\xb6\xa7\x9e\x19\x94\x7f3u\n\x1b59\xeb\xf4B\x93\x7f7\x1e[\x14@\xe0\x1aw)\xeb\xc5\x94)\x8f\xb6V\xa6\xa9\x02\xe7P\x8c\b\xb4\xe8\x96\x06\xeb\x83]\xcc\xc5\xec\xf0M\x19\xdeIg\x93Z\xca#r\x8b\xfd\xee\xe7HPN\xabU\xb6\x85\x98\x84\xd3[\xe2)$\xed\xb0q\x11\xb6/d\x04Z\x9cE\xba@\x9f\xcf\aJ\xd7\xcd4O==\xf3\xc3\x1a\n\a\t\xa2\x9aUhl\b\r\x9a\x1e\x93\xc1f\x9d*\vV\xe55\xbd\xf5\xf6\x10\xeb\xc0\x83S8\x04Yp\xea\x95,\x1f\x8e\x9dnp\xacT\xd7\xf2\x14\xab\xbcd \x9a') preadv(r8, &(0x7f00000017c0), 0x199, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r10, r9, 0x0, 0xc0000008000000b) ioctl$KVM_DEASSIGN_PCI_DEVICE(r9, 0x4040ae72, &(0x7f0000000640)={0x1, 0x1, 0x7, 0x7, 0x2}) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0xd39}, 0x0, 0x20, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mount(&(0x7f0000000700)=@loop={'/dev/loop', 0x0}, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='ntfs\x00', 0x124040, &(0x7f00000007c0)='oom_score\x00') r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r11, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x501400, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000600)) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@null=' \x00', 0x6, 'veth0_to_bond\x00'}) 16:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x10', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='keyring\x00', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = getpid() tkill(r1, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000400)='net/ip6_flowlabel\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x251f65c8e12e2655, 0x4836b18343ea689a, r2, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000640)=[r7]) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000640)=[r9]) r10 = fcntl$getown(r4, 0x9) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x1, r6, r7, r8, r9, 0x68, 0x5}, 0x101, 0x100000000, 0x8001, 0x912, 0x81, 0x3, 0xffffffffffffffff, r10}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = accept4$ax25(r4, &(0x7f0000000340)={{0x3, @null}, [@bcast, @rose, @netrom, @netrom, @remote, @rose, @bcast, @default]}, &(0x7f0000000140)=0xfffffe9a, 0x80800) ioctl$sock_inet_SIOCGIFBRDADDR(r11, 0x8919, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e23, @multicast2}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:34 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x180, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0xfffffffd, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x6, 0x1, 0x83}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x200, 0x0) write$P9_RWALK(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="570000006f000006004aaa65731977514a7d4dae5884cde11c4002000000020000000000009602d9000000050000000000000008030000000500000000000000800000000001000000000000000b4a3e209aa86d421f2503000000060000000000040012000000"], 0x57) ioctl$TIOCCONS(r0, 0x541d) 16:37:34 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x10, 0x0, 0x0, &(0x7f0000000600)}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x461c0c8042588c54, 0x102) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x1, 0xff, [0x8, 0x4, 0x1, 0x1, 0x4000], 0xff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x101, 0x2, 0xffffffff, &(0x7f0000000200)}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@loopback, @in=@local}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r4, 0x541d) 16:37:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) openat$cgroup_ro(r1, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) fstatfs(r3, &(0x7f0000000300)=""/244) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x6, 0x80200000, r8}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:34 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x180, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0xfffffffd, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x6, 0x1, 0x83}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x200, 0x0) write$P9_RWALK(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="570000006f000006004aaa65731977514a7d4dae5884cde11c4002000000020000000000009602d9000000050000000000000008030000000500000000000000800000000001000000000000000b4a3e209aa86d421f2503000000060000000000040012000000"], 0x57) ioctl$TIOCCONS(r0, 0x541d) 16:37:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001980)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000640)=[r6]) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r8, r7, 0x0, 0xc0000008000000b) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000700)={0x0, 0x2}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x5, &(0x7f0000000600)=[{&(0x7f00000008c0)="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", 0x1000, 0x9}, {&(0x7f0000000300)="db05287c76249d067cda33d504d19ee584ff375e18fa28764a285c52f28bd7371436a3f93dd7e7586d8c7925c2ddad82bb600a19b43e17d11e4281ea5bcc39f2866e8ae4b9ba128375faa00d9513ce9c0ee7b0c08c07d39144b836ebf1", 0x5d, 0x9ca8}, {&(0x7f0000000380)="0ff32dc56b9ff664858cf6f1fb1dac36523890f1df085d5fa4438a096792653346290b10031ac128d6677020caf50dd57cce290e4eaaf172f4aca52012d67272a28fd17104704c22bdff2c56e5cfdfaf4566da5ab3e957af281091e9bf6ae08accacbf478f9edc17e5ea9c2f19e7d066e83627a2b5cbb9ed8658375383dab753041b32bcee98d062e4fd834bf1c8e578935635c6db1fe10a9fe53a7f4dea665ce32f8cd7aacd158d321cf2a6cebaf516f4b76adf76a902153e19f6eb9161", 0xbe, 0x3}, {&(0x7f0000000440)="d8da3703306f4bb439aa3035436b8983af2dcd5e730d983e29f445baf76dc240328763cfb4a12a8447a5ec9c34ffb937c19fdca771324c14f5141d4b32e5902dcd0ed393243072c2644b3354403e7b0dd30e81bf751a4d6b5b49babc3c7f831998bfa419c0ed0ef910ae9cc43c1d7f08fd69a8509cce648168422d3cc3a3e93769d2f6a4ef2caddcb5e6acfc5bbb00b63fc9a6442a4e767d36a74fac8df9c01a292dda8aac442d56fb9f07fc900ebdb294bd1321b4cb8f9e0567f283665754019303d4a9c0d1d413c35cc5f8ec2650b74595369a4b25ea0466cba35e0596a9d50effb7", 0xe3, 0x7f}, {&(0x7f0000000540)="a42cac90d77664b8e3f542ff9e9a6c35c961f92b786d52ec37110451d6c9d0055a1d2eca4c8381d382e110699b9fdef070cd9ca84d0c3d4195e545f34dd4a78943ee985dbf906269f731174f224d22c7cf0a048ad5a623dbdecf4a463d6b5f46a784d81c0404220a371d6e49aabcb9bfce650058bb56cae1c98ece8c832d67fc3e26db4f528b4612a4a4a6c90b932397654ab293d799788f015d5b6c55fa86e672af9501c0", 0xa5, 0x7f}], 0x0, &(0x7f00000018c0)={[{@quiet='quiet'}, {@part={'part', 0x3d, 0xffff}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@quiet='quiet'}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@gid={'gid', 0x3d, r2}}, {@part={'part', 0x3d, 0x12}}, {@uid={'uid', 0x3d, r5}}, {@gid={'gid', 0x3d, r6}}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000005c0)='blacklist\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14mP\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000440)={r5, 0x30}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x80}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYBLOB="81000000c158522e67694d56260d076fe7654e229c828858c8453320469bfcdc88e7d865bb0acd5a92a748fa5b63309aaba4d533cfe24834de872b1efaa82800281733115a6abe49f44cbb08b88efb00800000812f50f1cd8193d1b2bb339e2410ede0869237945e32352addae385cf7f9941e2fbda45e5116e566ab4249ce37122ea8eba0"], &(0x7f0000000140)=0x89) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:35 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:35 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x180, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0xfffffffd, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x6, 0x1, 0x83}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x200, 0x0) write$P9_RWALK(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="570000006f000006004aaa65731977514a7d4dae5884cde11c4002000000020000000000009602d9000000050000000000000008030000000500000000000000800000000001000000000000000b4a3e209aa86d421f2503000000060000000000040012000000"], 0x57) ioctl$TIOCCONS(r0, 0x541d) 16:37:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10180, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS(r2, 0x80984120, &(0x7f0000000080)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 16:37:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x8131, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000000c0)={0xb89, 0x9, 0xf7, 0x1}, 0x10) 16:37:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x10, 0x0, 0x0, &(0x7f0000000600)}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x461c0c8042588c54, 0x102) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x1, 0xff, [0x8, 0x4, 0x1, 0x1, 0x4000], 0xff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x101, 0x2, 0xffffffff, &(0x7f0000000200)}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@loopback, @in=@local}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r4, 0x541d) 16:37:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(0x0, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000340)={0xc, {0x3, 0x7f, 0x7, 0x8}}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$TIOCCONS(r0, 0x541d) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={r4, @in={{0x2, 0x4e23, @local}}, 0xed, 0x6, 0x5, 0x1}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r5, 0x9}, &(0x7f0000000180)=0x8) 16:37:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x10, 0x0, 0x0, &(0x7f0000000600)}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x461c0c8042588c54, 0x102) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x1, 0xff, [0x8, 0x4, 0x1, 0x1, 0x4000], 0xff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x101, 0x2, 0xffffffff, &(0x7f0000000200)}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@loopback, @in=@local}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r4, 0x541d) 16:37:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x2}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x123) r2 = accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000180)=0x60) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x81, 0x7c, 0x20}) r3 = getpid() tkill(r3, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0xe2c, 0x1f, 0xa478bd6d162ac62e, 0x80, 0x4, 0x1, 0x10000, 0xff, r8}, &(0x7f0000000500)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000540)={0x8, 0x200, 0x9, 0x1, r9}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$sock(r2, &(0x7f00000004c0)={&(0x7f0000000240)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="0643", 0x2}, {&(0x7f0000000340)="82258a189458abcb942e2a5b5f01fef04f49512a000c5a8c48d4a49bab7dd5c4a6896ba6fbf5f255d43a9a5be43cd0422f", 0x31}, {&(0x7f0000000380)="4c05ef1c0f786ffc9e5cf7d754ebb22466dd78281640048fa103743b9f9b8ad5091c9f2a804c5cf737beb4f9b6350d60cbebaeaec67cbe47eb0ef9b3b2d7", 0x3e}], 0x4, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0xa21}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x25bf}}], 0x90}, 0x8000) write$P9_RGETLOCK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000370200027620f339000000000f00000000000000", @ANYRES32=r3, @ANYBLOB="02002f5e"], 0x20) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000100)=0x80) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) 16:37:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 16:37:36 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:36 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCCONS(r0, 0x541d) 16:37:36 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x10, 0x0, 0x0, &(0x7f0000000600)}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x461c0c8042588c54, 0x102) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x1, 0xff, [0x8, 0x4, 0x1, 0x1, 0x4000], 0xff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x101, 0x2, 0xffffffff, &(0x7f0000000200)}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@loopback, @in=@local}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r4, 0x541d) 16:37:36 executing program 3 (fault-call:12 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:36 executing program 0: mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x2120411, &(0x7f0000000080)={[{@xino_auto='xino=auto'}, {@metacopy_on='metacopy=on'}, {@xino_off='xino=off'}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@permit_directio='permit_directio'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:36 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800100, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r1, 0x541d) 16:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r8, r7, 0x0, 0xc0000008000000b) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x6, 0x2, 0x80, 0x1f, 0x0, 0x6, 0x120a1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x40, 0x800}, 0x1b0d4, 0x6, 0x3, 0x8, 0x0, 0x4, 0x401}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r9 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x2df7f5e6, 0x2000) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000300)="c1942cab2040a445ed6257d0f1ee2a8261f389e3a276aff7e8262849f8959bf9ea7b9364b82501a8e8db66394b3a5e4398cee45fc53385968833df8434b4d976700482b73361716e79fcc2a9ff62", 0x4e}, {&(0x7f0000000380)="acf1e4fdeb292b1f8e40b6133e0fc34b91ede8b414b2065461612c6efd1f4d80eda1103d1d6ddedde159f619fd5875dc09238786e1d13497149f5499595d31c63b5c2c9e431951cc3b3c118fad", 0x4d}], 0x2) 16:37:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x113, &(0x7f0000000200)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0xb, 0xf, 0x0, &(0x7f0000000200)}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100)) 16:37:37 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r3, 0x541d) 16:37:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xec, 0x0, 0x89, "0213c25538d81de507aa99d44c879a98", "67a4793a9ff5008687f23cac711e8b3e0c33fb92ccb1e3245ec676a9f9d558c04773847237cebde5141a6a042952a46e32f52a0cac8f26c138ed0a27299276e7fe44c9cccce557f1a8463d438e860084a7e520c05a4bc3cb17b8d343d00923a3296b7dff3c61ad9efd29cfb3f17f7667309268e847b35e902e931121c234d84896312f28ba3ff1320be3cc28ce71858c56f76146475cce6da2cb8b128a3d0e52ff8ea59fbfc0d8a8b8bdf1d0ea8901971832a42ad367630857c2c4b29799c759b9b05c6b8527445ebc210d9f7e3d61fe03cec4d0d04d4c"}, 0xec, 0x3) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) write$binfmt_elf64(r4, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0xac, 0x5, 0x7f, 0xa6, 0x80, 0x3, 0x6, 0x7fffffff, 0xb0, 0x40, 0x130, 0x3, 0x9, 0x38, 0x2, 0x101, 0x20, 0x3}, [{0x3, 0x7, 0x7fffffff, 0x6, 0x2, 0x7f, 0x5a, 0x5}, {0x6, 0x51, 0x7, 0x1c, 0x100, 0x80, 0x3ff, 0x200}], "243ff44175ca12287933306465b84e991e0252d96ea030fb39d111fe432bb9dc99d2dd63556765c33f1568e7d17ba671f2929a236ad60372c88f0b65084edf63bee2ddb8d2fa60bcb2ec70e44057109f9d866fe8f87e8d98da60c689cb9c784643a457497b37283b987ad7d011f338f7f7b6de85cf5c273b508ded54ea11bcef8f5ac8fa393df9aa9222adb509bb015cd7d8955af89898707d32af337d", [[], [], [], [], [], [], [], []]}, 0x94d) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x400000, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000180)={0x5, 0x1ff, 0x5, 0x7, 0x1a, 0x93, 0x1f, 0x81, 0xd6, 0x2, 0x7, 0x8}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:37:37 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:37 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r6, 0x541d) 16:37:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0xca, 0x4cb, 0x0, 0x0, 0x7, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net\xafr\x00\x00\x01\x00\x00\x00\x00\x90X') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000000)={0x20, 0x14e5, [0x6, 0x8, 0x6, 0x81, 0x8], 0x1}) ioctl$TIOCCONS(r0, 0x541d) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x6c00) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x2, 0x70, 0xd5, 0x6, 0x2, 0x40, 0x0, 0x9, 0x2099, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x6, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x1, 0x1ff, 0x5, 0x20, 0x3f, 0x1}) 16:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x21e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) [ 3083.830133] net_ratelimit: 21 callbacks suppressed [ 3083.830138] protocol 88fb is buggy, dev hsr_slave_0 [ 3083.840335] protocol 88fb is buggy, dev hsr_slave_1 16:37:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r2 = getgid() fchown(r0, r1, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0xc0000008000000b) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r9, 0x40000000}}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r9}}, 0xc) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000140)={0xb, @capture={0x800, 0x3, {0xff, 0xfffeffff}, 0x2, 0x46}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd], 0x2000, 0x2000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3084.310133] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.315286] protocol 88fb is buggy, dev hsr_slave_1 [ 3084.320445] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.325473] protocol 88fb is buggy, dev hsr_slave_1 16:37:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:38 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:38 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r6, 0x541d) [ 3084.470120] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.475299] protocol 88fb is buggy, dev hsr_slave_1 16:37:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) getpeername$ax25(r2, &(0x7f0000000000)={{}, [@null, @bcast, @remote, @rose, @remote, @default, @remote, @null]}, &(0x7f0000000080)=0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYBLOB="ff0f0600008000005d1e1f00f48318000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x9, 0x8000, 0x9, 0x1, 0x7, 0x795, 0x9, r6}, 0x20) ioctl$TIOCCONS(r0, 0x541d) 16:37:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000180)={0x60, 0x0, 0x5, {{0x2fe, 0x3f, 0x2, 0x6, 0x2c6, 0x7fff, 0x4, 0x580}}}, 0x60) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) unshare(0x8010000) [ 3084.630126] protocol 88fb is buggy, dev hsr_slave_0 16:37:38 executing program 0: r0 = semget$private(0x0, 0x1, 0x714) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000001600)=""/4105) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000000)=""/178) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x10001, 0x0) sync_file_range(r1, 0x81, 0x3, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x200000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$TIOCCONS(r2, 0x541d) 16:37:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x490, 0x1c0, 0x298, 0x298, 0x1c0, 0x298, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f00000000c0), {[{{@ip={@loopback, @multicast1, 0xff000000, 0xff000000, 'ip6gretap0\x00', 'caif0\x00', {}, {0xc9215a8e288e347d}, 0x6, 0x6, 0x8}, 0x0, 0x98, 0x1c0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7fffffff, 'system_u:object_r:var_t:s0\x00'}}}, {{@uncond, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3f8d628ac104bf2f6458ac41588cf2de98e7b118446445c9af2db78653ab"}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x3ff, 0x3, 0x1, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x76, 0x7cef68ee, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x800, [0xa18, 0x4, 0x5ddc, 0x7, 0x9, 0x101], 0x8, 0x3f}, {0x0, [0xc8, 0xfffffffe, 0xff, 0x7, 0x7ff, 0xffff], 0x1f, 0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) [ 3085.110119] protocol 88fb is buggy, dev hsr_slave_0 16:37:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x7fffffff, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:39 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r6, 0x541d) 16:37:39 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000600)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000140)={0xa, 0x5, 0x20, 0x5}, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4cb, 0x0, 0x40000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x12005}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) fsetxattr$security_ima(r4, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@sha1={0x1, "bb295a9172160103a2b1a12c2e8ba77936fd253e"}, 0x15, 0x5455082f37f14e1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDSKBLED(r5, 0x4b65, 0xf4) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$llc(r6, &(0x7f00000000c0)={0x1a, 0x5, 0x81, 0x9c, 0x5, 0x4e, @random="c68c48d18a44"}, 0x10) 16:37:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$TIOCCONS(r0, 0x541d) ioctl$KDSKBLED(r0, 0x4b65, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_getaffinity(r3, 0x6, &(0x7f0000000080)) 16:37:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCONS(r0, 0x541d) 16:37:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x2, 0x2, 0x15, "6c6d20a185250086ebf36d7ca3fc60a7c6a2872d4f1c018e29589b55038d9846b8eedf1992dc46595c2c5e38666f71a764d796e4565b54cf1b650632a7edcb83", "bfc7e0dba531385162c11ae6f7f71557292efce74d70f794d3d4167e04ac6fa6", [0x3, 0xfff]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/\x12\b\x00\x00/\xcf\xa2\\\xd1') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x1fd, 0x1, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x101, 0x10001, 0x4, 0x247, 0x1}) 16:37:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xe80, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x20, 0x0, 0x7, 0x9, @time, {0x20, 0x3}, {0x0, 0xff}, @note={0x4, 0x0, 0x9, 0x1, 0x4f}}, {0x7f, 0x0, 0x34, 0x1f, @time, {0x8, 0x3}, {0x20, 0x5}, @connect={{0x3, 0x1}, {0x81, 0x9}}}, {0x1, 0x1, 0x3f, 0x0, @time, {0x1, 0x5}, {0x1, 0x6}, @raw32={[0x5, 0xf12, 0x4]}}], 0x90) ioctl$TIOCCONS(r0, 0x541d) 16:37:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x2, 0xd4}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) lsetxattr$smack_xattr_label(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)={'user\x00'}, 0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) recvmmsg(r4, &(0x7f0000000840)=[{{&(0x7f0000000340)=@caif, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/76, 0x4c}], 0x6, &(0x7f0000000780)=""/163, 0xa3}, 0x8}], 0x1, 0x101, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaa9a0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x4000, 0x0) unlinkat(r3, &(0x7f0000000180)='./file0\x00', 0x200) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000001c0)=""/23) 16:37:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0xfc) ioctl$TIOCCONS(r0, 0x541d) 16:37:40 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r4, 0x541d) 16:37:40 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000100)={0x2, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='/\x02roup.stap\x00', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:40 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x3, 0x5, 0xcd7}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCCONS(r4, 0x541d) 16:37:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsync(0xffffffffffffffff) 16:37:41 executing program 4: setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCONS(r0, 0x541d) 16:37:41 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r4, 0x541d) 16:37:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = fanotify_init(0x3, 0x400) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000040)={{0x606fc47f51b73146, 0x0, @reserved="e69b6813de86a7f2e15407f313872ce482001bebf05f45a12dd7667ac1507b8d"}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000000)=0x3) 16:37:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x400, 0x8000, [], &(0x7f0000000100)=0x7f}) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f7}, &(0x7f0000000200), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) accept4$tipc(r3, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCCONS(r0, 0x541d) 16:37:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = getegid() syz_mount_image$hfsplus(&(0x7f00000002c0)='hfsplus\x00', &(0x7f0000000300)='./file0\x00', 0x9, 0x7, &(0x7f0000000780)=[{&(0x7f0000000440)="397213774f14760388816861d2411a1d104233ac1edd59c93d2c9c6666842cc210bcb80fbe8b16a541ff1fe1ab", 0x2d, 0x3}, {&(0x7f0000000480)="58e20a30406602a13c03a0300b5260b35c00c9ac4a97e53e1afbbd5836ba22daea44791edf311454886098ef84a8d8e87f6df8ad0e976214fdce564ce901e0c012d3195abc73a14c1eba271c045e5cf3988de0240f3424ee6cca6cd64f2dfac8231051ae4dc6bf1db64aacd92e2b739c0ede83014fa8f4d1fa66e8a8399616fd76f84a6adbd686ef4398d3f657c3e22fd1ee7989753bb1eb1a03d36fc768e4c1585d3636928384af3e0eb5ad59f9530aaafe9bd33e9f6e50f9c8f6f4c44c5d4275961690664689", 0xc7, 0xa1}, {&(0x7f0000000580)="413e49b1430d284e7473f3ae3fb010d121473b6bc63a26205d71fa2341424e2eda7d3f7e3a149c18b9c5e29ae3ce7c34be9ea073c30688d6722863d5f196bb63274f0b4c3f1cb19fd394a6ed69a037fa408f85df1306dba4267d998026d6a17f7ee5c64286b7545b1a4efe771a4d35df30b1a16799832f0697c2bc5d3b7725ae4ba5bcf55c", 0x85, 0x100000000}, {&(0x7f0000000640)="fa4226367f2443c5150a089c8638bc0ce7b6cd8a92a67e5b57518d8a1c2e9c79c049bd699b4798b4715c7e0f", 0x2c, 0xf55}, {&(0x7f0000000680)="df39044f590076bd66afcfb28af6ca38a0e554490e19a3a94cc87afdc97a72f25cfa1bab7d4dab1e884283e690e7500d00dc3217dba88d11fbdb55fe65e1a0426ff5ffc5a57b2b9c294d972521d28b7c2ba41c883fd9e019", 0x58, 0x2}, {&(0x7f0000000900)="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", 0x1000, 0x6}, {&(0x7f0000000700)="1a91e33aeb145bae67b236a2fd5e9894da54e7b9b7f2dbb30c76bda124cd1693856f455ec33874124c7c016e82b4aa2b6800606bddb76bcb341efe4e91a352c87b9af7abbdb4a0e94382a807790ce8f730", 0x51, 0x2}], 0x2454446, &(0x7f0000001900)=ANY=[@ANYBLOB="63726561746f723d863ffe602c6e6c733d69736f383835392d322c6769643d", @ANYRESHEX=r3, @ANYBLOB="2c6e6c733d6e6f6e652c6e6f6465636f6d706f73652c747970653d466886502c736d61636b6673666c6f6f723d637075736574a2766d6e657431776c616e313a706f7369785f61636c5f616363657373db2976626f786e6574315c2c7063723d3030303030303030303030303030303030300556e41d6f6e745f6d6561737572652c646f6e745f61707072616973652c66756e633d4649524d574152455f434845434b2c736d61636b6673666c6f6f723d2e5b262c7063723d30303030303030303030303030303030303034362c7365636c6162656c2c00"]) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') timer_create(0xc79530b39db0637, &(0x7f0000000240)={0x0, 0x3b, 0x4, @thr={&(0x7f0000000180)="18072114bc26679727cd0f9c69dbe98a92", &(0x7f00000001c0)="712c9e92a88baec41a061608a0236b092bdf8fb83c7397f57fc718eb9a9c914c3279610e60f0646c266af12fe051d87c72bf63470f21339aa50e22448fcf73de803526f7d0e9bed144459118cc5c72015007"}}, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/create\x00', 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r9, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r10, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r11, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r12, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) sendfile(r11, r1, 0x0, 0x9) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000001b40)=ANY=[@ANYBLOB="0100000000000030d6c907400900000000000000ffffffff0300000000000000e2ebb4cbf0b8cf76eb2db2208e9493545d580f5caf3f5e9eceb4babd379782abe544521e7b1d55d1546e40559661111e5d63e2a1fc17d058cf27b468ffe0d60b5735b5d0d7a6faa727d2fa791c09caab5a711fa499a9998d3d0734a0f6d4817360d1363b7c8e302ebedaf0a1e20b8c06510000000000000000d3244de85135a0a297b024a5519b66dcb7dedde1105fa9ea8d9f79b08438676200841d97a6b45856a54a3a781b1c390c4a3f42983cf600"/224]) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:37:42 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:42 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r4, 0x541d) 16:37:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) sendmsg$nfc_llcp(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x6, 0x2, 0x3, "34e6baf656b3109b23f99aeb32032593cd60e6fa20c1850892416a94777264b7e5f6b275a473c4221a6d0bdbf58a22af3ed8453012ad6233f4cfa0c67cbf4c", 0xc}, 0x60, &(0x7f00000005c0)=[{&(0x7f0000000140)="c4eacbeece477267e3ff7a68d1bf984cd705ed510daddbaaa713478ffdfb235708d44921e8c8ae92038f08", 0x2b}, {&(0x7f0000000300)="fe2154075b85ca24508826b8b422492421ba2275b75ee90a00f3002ca8c56b99a0d5cc65fb9ab2210fb922666195627003dfca08eaf4d0b3708f337def3760a6af91e901bb63a96cee2c9abfd5aa92828cb00974149b64bb5aabb2109cbd80d2a154668ddba45ccbf086699835673eff90b760418ac717411923e3701bc5b6f391c145235b36f96649ddc866e6b2704df083b9da28e2d6858b", 0x99}, {&(0x7f00000003c0)="ff0c3c76d2fb09c5bcc1e425a122d1042cbd78cd14800e4b02a4d7332dd5a22e1867f5e842715b7958a991d4332e3d7ba70d129c594f1e244c55fef04e8b931cc973e647ada3baf9bec011c3b82f798f20beb334e387a5121b08", 0x5a}, {&(0x7f00000008c0)="a56a5a5ef2b0ceba6f32cfec203d8a47df28ebf31b74be3f0d59d5be459fe355a0e4c4b37bb0e2ed43677cfd1cb2059d4523eab1eef11c505e3fb8940196295962a71bef9f64b4d8b61031fbc42753e9caede30e92400e15424e7a9e17f3398ae161718178a7e996ece5ca5615ffd740c429dc7c84f1592aa12c15ace0e4c61eeaeb86e87f40e7625e248e1ef5fa68f621fea8b54f2247e8ee17c1fc3b654f9b37dbe64034a52f186248e26029ff7e4e2442ef1a1bad4adc9b6a9df3f471bf5bf8cd0838ee2adfade4c0c853a1721ae652411925a59e3ec7886c4a147851a7db0c962dc31d5c80d69959ea0615f132d70881e9cfda0f0941488fecfde353de239e299a50a5c745754e1c1d857fbf27e1ed1b0ecd2215cb3cc64a27590fcf7b628c103a99554f688ee0d4d6950af46f5e69f00b6924b5c50eb22d326acb64246c81459d5283ad896928642d0aa1ae72d30076eeaaec9b870be08a5952e48dd6e6ed5af5d0b32b3e30694aa9ff683c44c2b1991694cb9dc9a4b9629c293f2000ca40f1d1a2e81d922ff60727b05f01f48041514d1b4bef43c72d670e82eea96af8299feee015f6d1d9d1f0d224a6a8547c36f6b191d2b631df22d75c7ec4e559290035dfad9bed4f9e432945414fbf6246c591026f76eebb970d264a8f6ae28c3ec9c25ddfdc982f000dacc8810dde9a85a3727de0346a4d04907382ccdd9a7ca3a06381f50c51e2054a0e4caee209f501f5a35657c973dcc684991fc15cb3edfc841c3376c30b573d973fa3d1ebe303aa9f08b748acf2a9b7ac04212b93fb42faf285ba7f4f6c6369c8acecf37c8f1c54e611655c06b791100e3a7f354c8de9183e5bd4e15bbb56f73eb0777a906ed4b50ed94d1144726b4c8a3f08ef9f4b91e4a7754c9144ad8b0c0b355fb8db45bd46ed2aa2c093056ef16eaf9b2946885b56285d41ec7f00c7f9d75e62d2a9429235e50cad8021240b13274c8eea18df3235dda7782938bc4c1ec4ec2d727e9b251d53ddb2639ff418f1cb59d5262615de4d314b7982af5d501abb9b44408ad3d8ae3c7278ac0124811e17cea804e75d7ad2608ab3b1856383af4c72d3abcb5be9a1e6907d9ca3562e7d6fe8014020a264eecefddb4482a920c0864cecc03477993f3e9d42d91402d2dfaae2541b2392bf0f41cdccd5a42cc84211960b361dc6d34b7cdb55958e59adabf8b5aad0465ab2bb7e81620b244c2ddf2c2cc0fef5746fd6334d29f7f627f71c42660a864a0cd061c54972a260ad004b2060d513e30eaafad5b3df70470abb3d3a3da02b1d00b13f8b8b7d266d1d6e96559bba3dd8b95c5ccd16082d88070ca88431b0475f8028808fdadd61ab5f54755ed14bf6265ca2e4cff33c43c70160068061166d927f66660f247f9a8132230ff8f20934271b961f9e7e67c571f3247d81ca1e32e9f5cb024d2a528da3d3fd530eeaf34ead3bdab1c8111b8568b743a586a8f198912485ead7c53e188af2f571a6b52a500082e82a7fd16c51333d412ee6d1dc57a3c0b563029b7c1e714402df8c736362fabe176282bfad0040f23058b59363e8d0996a73aefdd162e6705ff8b944638cd93c5ba75ed4d92b7f0013b1784ced1db1e271f4f367c3ed024d658f5ce537f56a4eb6706a7d921f950964ad50418c680f26099c808f322fdcaa7484ea26301cba39559850f1e884ddfe2d7dd1d5d007cbc1d19bb8a1f763e9dffe4a59fcac41b534353759dceb22d317acdfb566c0eb42b84149591b8580f1520e6b3cdf19f1b24fc55391b2e4139ff02392bf931c50bd8372be7cdf6be7c539ecfcdce49dc7747c2ab00efaab74b2aee7259f9dd50b2ee071b759413b5442b5d50792b41a6f34b742d8c78928dd0da3e4c0cb7cdb5166decf1976f9531caf8358fdc92a11672a7c6ff2d57a487e42f36219ae34774abf759078ec35713364c3a17ccb893f2e44ba3b50042c9a74b914eecee0ba85832f3e2a2aa43a195bd4a0c099fe650c21954b22b0913540d8efd52d0f71b0015b88295df83d3653364c5d4b76435b77a92fe2718577d624c08989556d3a94f677776cf5d31ab2fc0cd10bde5aa992d3c67b3a9805e8e198ee8be0fb40b06382f64d8696fb81cc7f4ccfd462cc3f8a79a4f9ecb216fd398bcd8bad9048a9dc0a36f2648f50df0fd852300e87792e79d0f4091adf3fd5840df4efd1e1712e8d2bfd489dfcba8bec5c56d3072445f6eb94fc67d0c440ab95850255a2bb5668a821adee9a1d52fd4723aa0f31b2dcb3d4b0036cfdfe6e98ddbec510d401d9c7e85dfa5cf67ebc1c2808eb5140467104a18325869926598908bbd9eaa7682825bc22d053c9a4121542442466ae8695840a0b85061768aafb118b4d9915cea76bdabdb0e24aae244b0e53b21cf1b5b982d412fb1aa08ce0b7ea3794297cb60109a74448439955208348380b31e8810fb29d21d0b4d21454a8f3de7c0ce4bd57a796af85a8ed2f8b6cacce9b3bf06f5726e858ed4504f6007913eb14553481b30ecbf389ca028933a62f686877ff317a6edaf9c47047fce041c793b6515e8b594efe809bb6dbb597e0cde8f7d3ee1b3a6ddacee0317dd45597770e2f6d7fe6daacb7d6d6b4a91a1e5c31167655630ef736829ad3fdb3eeaf04e25bc39a33c37270cf246e86debc7a4e04c583fefdd0ddbe64b0d27686a78db7c89cbb9a3865e50ed9adb205f7517f9bc45cfd8ec0affbdc402c568895a26b9b3e1f52c84a6f51115f5c7164d630dfa34f2e3bd1f21298d27c41e82c513d849f938c96a57e0b63eefa1ed270ab187916281d9b57caf9818a49d589027ee95a4c1ebdf1201fb762ca3721500edffcb98ec24fb31ccd7ebbbcb3b844d1ca9dc0c0ac84bd706900e1082744e016a2fc3337cd4a3772a1aac50f8575226b3c880109cbf0f1f2cd6c6b0f65517031661b17923ed364c22fb935eb22c4fcd64ee09d7979bb74d7ce2fcc9ef0d11b66c879562216c3dd03d04c2565265bcfc367bf1757e8fea123e5acb7d440b98c378c04cdbedd358bd221adf1eb41c42e88661d91ff5cf8b455df6eff6be961f86f73413379131f70c2bf7e5bd0a3d51483c938fd1420c7b2a04a1617a3fded1bf1a5e7a0b3bfe82f837a272326c262c86f6244c9bc62143e0fd2cbda802f779edeab0d5aaca87fddd6ebf00f05721fa46c9704a181d1020842c0f31e3ead1a2953a690fe9c914223a0a6b43b6dd5bc28677789f8ca1a0fe9c8ea74e9967a649a8f7fefe9ce145fa0af252282b51b235e80a383b41e6e6173b428a2b46c53ceb8bcc15c0b4941d621d974dc1e093035064345bac30b71bae0487f8660cc9ba86dea05da4d4a4814f665472655b4f6dd161f5dc8f3690e2b191185845af159af26d14c9a6547bf5076a155601a91cd052ad4346c4694519386ea5d7afcf06cdd7a0a3dfefe5ee853cca2711adcda39ca937544c8d8aa87438df0a8992a13a67989be9de7942f2a971c16ae414d9a3dd1eacfdf55ec820e83826347ed97f34a30e9a62bdd92cd82e6123ce0b08a3e3001ee258638c522496319163bd0fee8b224249cbd16a065ddcf90c8f1bbd05e6a03a2bef5122c3cbce30b6e0ff8c69ac94721fe98562d47f955e0dbdb834766d76291ebcc048f7d5aaa041fba89117dd4ed9309991c99dd3b0ab83eadaa2dfd42dcd136a51ba9290732f64191d6a7562b8143e540fe48855a24d6adc63a431484df793887c69bface06855f65282f7df9d7f4b91c9000c0b3469ebabc4a93e0667b1a635a4da43037b142430ec06f7fe33e3790ef4bff8468b655b6a493651eb568b4c9ebdb7777195c2a9bd13db8ccac55315bef9aebef6e65475d3ccefe506f763df07db53f7d2eccbb01c265158d53ca0876d3ad13c9b79a55a41039d8d8b779b94fc4bcddefc6363bf2aadf1b73a028716166b9b1d841b925d89497a1a1bdc7a7eed5bb2bc02c906fdbdf095fce4c85f448a696c5eb25eb678595321e88fd91b6834261138f5c3865b3a7b60377de76413cf926b037fc3880f00fc98e839c79592b0e3a9e6adf444d7931cce8da176b3078c7a4b73a6c2ad39df6cc437d1353e9bb6e38c9629544edc122b0d0be781f6ff9277095af596eb5ab82e7de4aa05758973dd1ae6e2126fac75d70b6e6ae1f38dcc06697e507598bb7202dcaa0b4e9817c4ab256703f48fed53c055f00c72352baa43825c08c10c172c227f2afaac2758e24e203f91b8776cce197c058ff9548898be3fcffcea46e1062dcf6e3937d9e3ce31942645d3e84b21e0c2a45b63283f74dc21bc54292d8ad0d86ba553e349eb52a3e64391ccea9ce72bfaa471b478545d569eb565849a61d1c2ca49c9f3654d49d9218d36ea84faf722d2569b9e638e160d52f95756f74456432f53479cc9bc874be49f99a164fbbc00eb141a8c1151741aea07c3a700d3f35022b53deba29268af3e1731e7799e295bc660dc4345181119b80c2b87520c9446916a8210a0b3cfdb6edf05a5e8d6f349464b2373461f1b4d6aeea79da65a8718a6ef8c38055ddf769909e18fd9b1c8dc783f521f8cec27b9238b19516f5c50f8019e4e0415bda804033f4c61170279bf1a4eb879e7c911f24a3b73fb9423317747727d41af9a2d72f1434b010e87cd1d15cda22ca0e8d88e29eaa1bb3f42946842be0ae6afc6ed3c53a34226d2daaeac65366aa6f8f8e50152ed29e642ce69d710f19bd583703fa15e71923134a688232baf767a8ad2882b05cd06ec34c5fe94b06dde27335fc9e3dc4f5cbb0611f2580a5955dea2e018126978ab2bfeee45362b06f084fafead36d6fcd0ca94bec4994d077d9d302d0bc50df065f86fd2e15b445649e7bb794e3242adcfa1d28c87f48e0f51e62460563aeede928da4e9c38c317012b915f6f2c52418d2fc65397745a658563f3f81d81afa4fdc9eb9b91e8d14597480ab33dfa44f5cdf682d81876e03e9204503a824b16ef8c627bbcf30f793c4443e036b962cd93c4de39819fa3cd5b26460cf6b9086f151b8e3bc809aa9c7110c3a4475840df53def21988312ea685f2030124a0a7f985c645e4dfefd1dd76fd2920feb470540e495a15300e7d5dc90faf05e2c3e6f714b5be9124ad4579164e7505e59042c415b90ef2766a6c1391bc0f666a83bfb9030687a45d6fa6e0d5e4c9fba05840e560b4585c8e61a3fda9cbb68e958554bec3c716b2c66819ed3170ae2ea79f63d4244eaeae35705b3b1eff4ad75d186912ba9f4b6f638dfa747d5ac1b92abbc3aca7880077960fabea04c0c241a8a11eccce7bfd3c068899a0ad433f8d1983116323c37462ce314e4fde0acb9a8cc4d87a07ad43174b1d818c885f9c0f8c383938064aebf0ebf187732c7479a4d2eb9011b80c9e43e2f22a12c61fa69be9ed23980d2d19295855d12e9193099266c3eb7891e8f5e7df98b2488a66335edba5e0daed4bd7b50b7ae076c9fd9ca5b21dd8130b4d039c484883f5849d29a9a8baf3fa2cc4c6a70ef67ea154381983936d73e06e306d021cbdef97f33f260cd53e49f9ee2574b54f4835f94680535989f06d6fb8ff1885422bd2b3176724ee91909a3bd8e7db611b499ad4e598185b562a50bfa49212fa0e1ebc6118017380d4fc562e088550ad8e890da00ada44efbbace25b375a47ef5ce9715b590d0f722c7c0e8d9ada2549294f1d6a188616425ed6d3f06983497291e3e594b37d86832e6fe9035702ca6cdfcb656281a7c2e314efe727222e24398d24b49f755805d814fe3dd29ee7d3f2da574d90972a139eb96b9dc795", 0x1000}, {&(0x7f0000000440)="ba402716c5da9ebccf6008e046876bcdff5578f0da8eb66ee126bbd06750c793a91af41cba0cded35f14ea6cd8e987843cec15de1bcaa92062b0290816ba008eb0b992f0b217dc61dcd44cc7bf604af6344a63748af6404bac7c37cebf330953a42126abf76fa0510dfa457cb812144993c0889bc2c76d07b17788aef19679000e60c3b0225b9efdeb98ee6579b38588657a324d1e2867de0493b55935902aae1c3469e284d4d6e548fb92420f90b7d550ffe71a", 0xb4}, {&(0x7f0000000500)="a5f7803ad255b08debb1423c4edac6b4bee1c1aaf73e18317fe3ec1f0494fe54e39b9882a3a3a3712ef9da3fe3bc4360ed9ed89c8faf22a6bb48380eb95f3799ae7933cb0c4e9c23d97b73f7fad3d7b72d22cacec08b0a39e7e60990052090742a81a8db0f8e8a9eb6ea81e20150779e42a71a5fc11a5240b284308e209133b1b0bef026a378772d697767ffdbfec166930d8549373530e458e481", 0x9b}], 0x6, 0x0, 0x0, 0x4000}, 0x40) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/checkreqprot\x00', 0x8000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:42 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 16:37:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x24e3a9cd8b2e9861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:43 executing program 0: r0 = fanotify_init(0x36, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x65, 0x1, r2, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="fe000000000000007e0e771901ab", @ANYRES32=r7, @ANYBLOB="0190000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0xa, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_AF={0xfffffffffffffef4, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000080}, 0x20000000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r8, 0x541d) 16:37:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20018}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x1fc, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x85}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xed4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe63c}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 16:37:43 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) [ 3089.161258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6506 comm=syz-executor.0 16:37:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="c8beafb4", @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000001400070008000200000000000800010003000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x7}}}}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x12}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x101, @mcast2, 0x9303}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c5}, 0x8080) [ 3089.255678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6514 comm=syz-executor.0 [ 3089.270159] net_ratelimit: 21 callbacks suppressed [ 3089.270164] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.280290] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.292176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6506 comm=syz-executor.0 16:37:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x200, 0x20}) ioprio_set$uid(0x6, r1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r3, 0x541d) 16:37:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000140)={0x67, "faab8dac1e3f79b4306065a98c94d245beac0d5b46b96c8c6906d98b781fada36b5cde8d8568e304bb3ac8da1f04ac88cbf34f989b8f1a2590c27ab0270f2f9de546eb3ef9743df98767c463008c7f5b5896368bb69282e946fc02e2d641fda5681fddbe80fd445a453f156276060fe73efec3e4354038d719612418db4e7057"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:37:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x2, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) 16:37:43 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r4, 0x541d) 16:37:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000001c0)={0x3, 'nlmon0\x00', {0x9}, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x80000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:37:44 executing program 0: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x0, 0xfffffff9, 0x7, 0xbad5, 0x1, 0x8, 0x3}, 0x1c) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/35) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="c56724f77d5ae8a69b9013e954923462e2cc2473132b93c8bd48d585d4bed8482c65962be9831f7029234e127424415d3e40cd1c1585c78253c15181fa4e2d2b092a0c82ab1b13d796abedb0dfdc7f5919bf8c03e0098f4babdfaad989e0b2dd3670393c1e479d954dcb153a86b78f587029d35b9bdf73c87b988eecae8e699b5093b30957a9daa4eba779360da85448cdbc40", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000001400010080a7ec467d96060cd9e61bd464d594306afc645f15780c2103d9da9d7202167f776b697dbec51e8a3d416b9e2ea67ef07a0f32c3dc9c304d437799f39109d3db4d971f7e0c7a93de20f9b7aefd1c0a0150e3810eed380f186d33d7078d2887b6a660ecff1c2af76570ed009ecc89de5dce81ae2538f4366794f4c1d3f4fe816418644022c3486987f75c233e2b84c1b35d67abc9b115200998676c6e"], 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r5, 0x541d) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r6, 0x80045626, &(0x7f0000000140)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x3) [ 3090.070162] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.075328] protocol 88fb is buggy, dev hsr_slave_1 16:37:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x1f) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xff00, 0x1, 0x9b, 0x0, r4}, &(0x7f0000000300)=0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) 16:37:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') mkdir(&(0x7f0000000240)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./control\x00', &(0x7f0000000200)='tracefs\x00', 0x0, &(0x7f0000000280)='reiserfs\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:44 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) [ 3090.550125] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.555262] protocol 88fb is buggy, dev hsr_slave_1 [ 3090.560477] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.565561] protocol 88fb is buggy, dev hsr_slave_1 16:37:44 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r4, 0x541d) [ 3090.710123] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.715298] protocol 88fb is buggy, dev hsr_slave_1 16:37:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@security={'security\x00', 0xe, 0x4, 0x4b0, 0x298, 0x298, 0x120, 0x298, 0x298, 0x418, 0x418, 0x418, 0x418, 0x418, 0x4, &(0x7f0000000140), {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2a}, 0xff000000, 0x0, 'veth0_to_hsr\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xa8feb91649526b5a, 0x1, 0x35}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x3, 0xfe, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7ff, 0xc, [0x32, 0x39, 0x24, 0x15, 0x12, 0x1, 0x7, 0x8, 0x13, 0x6, 0x30, 0x9, 0x8, 0x11, 0x26, 0x34], 0x0, 0x7, 0x43}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 'bpq0\x00', 'ip_vti0\x00', {}, {0xff}, 0x2e, 0x1, 0x58}, 0x0, 0x118, 0x178, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x0, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4, 0x101, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0x9, [0x9, 0x8, 0x3f, 0x33, 0x26, 0x30, 0x14, 0x2a, 0x1d, 0x32, 0x1b, 0x38, 0x34, 0x19, 0x34, 0x7], 0x2, 0x8}}}, {{@ip={@broadcast, @loopback, 0xff, 0xff, 'veth1\x00', 'syz_tun\x00', {0xff}, {0xff}, 0xff, 0x5, 0x40}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack1={0xc0, 'conntrack\x00', 0x1, {{@ipv6=@loopback, [0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xff], @ipv4=@empty, [0x0, 0xf909b4186bb27b49, 0x0, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffff00, 0x0, 0x1fe000000], 0x6, 0x80000001, 0x0, 0x4e24, 0x4e24, 0x4e24, 0x4e21, 0x1021}, 0x101}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0xb5e, 0x313a7698}) ioctl$TIOCCONS(r0, 0x541d) 16:37:45 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r3, 0x541d) 16:37:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_GET_SECCOMP(0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000a000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)={0x129c, 0xd, 0x6, 0x808, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x6}, [@generic="0efed58e2b3b9dffe58b681524b6733fbfc1bcc87ac927043040af0fa361dc6c9234e8b226a233", @nested={0x11c0, 0x2d, [@generic="c4b88614fcfeeae3687aed73164f522d1c470abb3058a76c0a10839439a62913b0a041ead8c1f8e6cd79405d41e6c3984f9b43e755e13202b48dc9aecf", @generic="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", @typed={0x14, 0x5d, @ipv6=@mcast1}, @generic="0dc51d149ec2944e0f1e5b245891fd6006c8b6720fe066c94876c71ad536c84f47b9b7049fc28a9415ff01d938aba80ca6f92b3c49d78f4fa73d87ed3c4de29523bada7c836e9c0684aca3d5498da4941497d4d6215b4f9738f194e5ffe14a8f87aa2a78493445c38451da2040567f0460a6c30692198702ef25df0ca3fe13f83b4185e0aa4ecc37ca1ca25905c2c85648cbd716d836354ef2", @typed={0x4, 0x77}, @typed={0x8, 0x57, @fd=r3}, @typed={0xc, 0x3e, @u64=0x8}, @typed={0x14, 0x30, @str='net/if_inet6\x00'}, @generic="fcab2d0de09f411411f9515d0cec4a3276410c614b1bd038b376f5effab26a67275dcabc746d81ac21ccb600eff15b700be28b5268dd8ebd6a95f66156a8411b9364306e6180dee16a0ba8193d300c9194f091461168eb77a60f757d2684e6a2bc3bef4e4d81aa7741b5acd0120cc06b51bfac6195aa9ae19a5ceec8b416f85c92f95f4b80c07158de81365e837a27fef9e068d0c722151852d39e148797cc4b97faf747"]}, @generic="2363db1fbdf27b5fba5d198cd5660675134f5c32752d458b6d0d13f6f8bd15d09c4d668c8b98ea6755b8187abd193893", @generic="6c9de347901d037b171c8083c7b66a46311410e1e95b53d922463dbb1cdb9306b7ace91374569e111d54c936b17435357204791a6ac6ecdb1322d012501f3d66055dfe6e5d122fcdd065f9f6e897cc8cda08a44be7cfbd1d72cae7e69a4b6b69271070c10a0a80c7d54c2b4e8c54"]}, 0x129c}, 0x1, 0x0, 0x0, 0x200011f2}, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x20002, 0x0) 16:37:45 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/133, 0x85}], 0x2, &(0x7f0000000580)=""/115, 0x73}, 0x2}, {{&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{0x0, 0x0, &(0x7f00000042c0)=[{0x0}, {0x0}, {&(0x7f0000004000)=""/80, 0x50}, {0x0}], 0x4, &(0x7f0000004340)=""/144, 0x90}, 0x4}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) unlinkat(r5, &(0x7f0000000180)='./file0\x00', 0x100) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="580000007d020000005100ff03060000001704000000020000000000000000002400090000001d0000000800757365727b73656c666367726f7570747275737465642801007d030073680003007368000000000000000000"], 0x58) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, 0x0, 0x0) socket(0xa, 0x2400000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x20080, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x14000, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 16:37:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x1, 0x4, 0x9e28, 0x0, 0x12, 0xff, 0xfc, 0x18, 0x5, 0x3}) [ 3091.416456] QAT: Invalid ioctl [ 3091.434383] QAT: Invalid ioctl 16:37:45 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) r5 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x280) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) 16:37:45 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x88et/if_inet6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$SIOCNRDECOBS(r2, 0x89e2) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$TIOCCONS(r5, 0x541d) 16:37:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x101fc, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd52ce0144e3a370e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2f8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xde}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8008880) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) membarrier(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) sendfile(r2, r1, 0x0, 0x62a) r6 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002f00)={@multicast2, @empty, 0x0}, &(0x7f0000002f40)=0xc) connect$can_bcm(r1, &(0x7f0000002f80)={0x1d, r7}, 0x10) ioctl$TIOCCONS(r0, 0x541d) 16:37:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x3, "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"}) 16:37:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x8, 0x800, 0x401, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:46 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r2, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r3, 0x541d) 16:37:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x90, 0x1640, 0x2000, {}, 0x7fff, 0x9}) ioctl$TIOCCONS(r0, 0x541d) 16:37:46 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) 16:37:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) fsetxattr$security_selinux(r3, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:46 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') socket$caif_seqpacket(0x25, 0x5, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000140)=""/144, &(0x7f0000000200)=0x90) 16:37:47 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) 16:37:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000140)) 16:37:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$TIOCCONS(r0, 0x541d) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000002c0)=0xfffffffffffffe00) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x2002}, {r0, 0x1}, {0xffffffffffffffff, 0x4000}], 0x3, &(0x7f00000001c0)={r2, r3+10000000}, &(0x7f0000000200)={0x100}, 0x8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e22, 0x3, @empty}, {0xa, 0x4e21, 0x9, @loopback, 0x5}, 0x0, [0x7, 0x2, 0x80000001, 0x7ff, 0x8, 0x5, 0x9, 0x5]}, 0x5c) lookup_dcookie(0x9e, &(0x7f0000000000)=""/26, 0x1a) 16:37:47 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) 16:37:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/146) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc0000008000000b) write$FUSE_WRITE(r3, &(0x7f0000000600)={0x18, 0x0, 0x2, {0x401}}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x212, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 16:37:47 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) 16:37:48 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r1, 0x541d) 16:37:48 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r1, 0x541d) 16:37:48 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCONS(r0, 0x541d) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'caif0\x00', 0x8400}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x6, 'veth0\x00', {0x3f}, 0x5}) 16:37:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT(r1, 0xc0984124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000029c0)={0x0, 0x3, 0x74c5}, &(0x7f0000002a00)=0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0xc0000008000000b) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYBLOB="ff0f0600008000005d1e1f00f40009000973f5d1c7dc25c1bc56"], &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000002a80)={r10, 0x4, 0x10}, &(0x7f0000002ac0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000002a40)={0x4, 0x8, 0x4, 0xfffff800, 0x400000, 0x8, 0x10001, 0xfffff000, r5}, 0x20) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r11, r3, 0x0, 0xc0000008000000b) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140), 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002840)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b2d9731d778a0ed2f6c7924a983420048d5a0324eb27ac7f980267b89a2a76f0cda64c377a843579205eb7055877b86b9fd1", 0x32}, {&(0x7f0000000240)="2cfc5636afa06fc6b52fe2943bae3d96e6b13b76acba32d02d91be8a00b7c1cd9e6f6cc9b354eee2c04f5c91b1b21c8db3d66e50adef7cadb2c6358d3069ea28d8b236b2023c1cdda9943906fa0f18152c6ff8b06e0e8b42f38b43dca08eec2830c21ae9607cc10aed561c63e038bf26d4b438452033ccc0ba7cad968d88a023a3f17534346876bb0726cd539d67a0cda483f9dd8da27f6bb03066a7e9b3a17a22f35bbd31a8d1bdfd3483c838e680", 0xaf}, {&(0x7f0000000300)="ef1ec0ee", 0x4}], 0x3, &(0x7f0000002b00)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x28, 0x117, 0x2, 0x10, "86fad443ecb8f8b13429fe9a154c7037"}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x60, 0x117, 0x2, 0x4b, "43a45de4a290a35ec3e1b40ecf81b9096d6e6f980dc40dad71dd2f851ff4d90c986cd840353e7a238396d65c03273ccf524685c3b954e3b29675f5198b3626cab5fcb6fd0ae71db15d72a4"}, @op={0x18, 0x117, 0x3, 0x2}, @assoc={0x18, 0x117, 0x4, 0x6db}], 0x130, 0x4000000}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="db", 0x1}, {&(0x7f0000000900)="fb89217356f76c028101143d7c1257be4436f54018f34954aa0ec363e6b195b9033dbfe9e8cae9fbf6c264c646b363e766b717172bcc02b6601336dafaf3a80d915a4561f2501c835c4149b2b6fc39fee788ce3e77359a1db8fbd36a21a19d9966ef65c83349aae741afe8dea85b823ba6b1a36f4d5cd811bd0f43220b2686ded669a15573a35cead1ceb1a3c4e7188d0f592e0ed55d463077331bb295a2070d85c43253f8ec19ce061c8dcfb40bd0c9eefad78ab48aa1f0d672553b358c42ad7a806d9e8a1aa85cf2ae9269cc239671d504734a121ebd79ced942f58d1cf3eec0f52bed83a4571f973592ecc4d1ca74acb80b121971611b79a785f3e9f301303e3bd6734013e5e31c0bf573788835868d291ae0fe56ae2dd01f718106306746a0048652d2caa566e15de431b494a01267b603f5771933d423cf749b7949f07fc50f4b501d26dc1bcb8d832e8a6901345085e6883d93df09ac8c04639c1778fb09d5deeba1576d5a448caf0caf42d46959216b135fc1d24b0be5a05e13dcc4f8f6add871c3ebc379df62923c0099c8064a869a07fc5c56fe64f4c20c61f68fe94b0d8eb2d70d44c6e011380bd15590879504ae74444a2bdf5cac1c26709f02d72be9ebf314bd71adb29f3f588695e40c41f7a83f698f9bb8e2ec83d656851b47a6ff020d605e8ff5622e0785489bb23f31655210901448b5e379eaa0bb458bd3e21b28a420dd7e0e8c56d60b12decd0dc8aa1416a97e8d0966b3e152779fc504d9d3aede99523961c345148b0d3d5732fb9dba835dbae756c35402574423e8e2660e30a310c6e3ae5cc082b8fb3ac1762656bb2288c2ac0060048e5fa9de25fdbd71f83c80a996600ac1c98176f3d5bd31ff16f7deebab176807f095bd45fcd8a6190a54dd49bdc90d70abe71277c42baf0dc5033ec6a1248c153c8d2fa9a75a6190e78c5818e0b240aea779099af577711a4c05e7712bfcc2b47c5aac6eeff677fbcde2beee326d8e458ac581f2daa889cf59394feccf2ebcf5c14b7e0d74ba76e24c1ce2c6796d87939048bd6e132ba1d40dd76ba78f07297de19d2750a8380364b84bfcaae24ed270499fac8b0f7aceb9a5dc2ec1ce5581e2920b98558c478e36499f3151db7fb8f91dae750d119a084c1ec0fd57cb083a063aa1a7012b1827278a3e28b4da7f8c5640c6290f98949a7221491471e15c55e2b46bacfc6a00b2fccafb366ea6c90c567706e7de65b326d851f6922fd7667f7b42d0b1de3976c1b752e8c184518d754d39a42a5e57638eaa0e816d101ee098810c253003f68a3afa5ee2291ae16db11044c7f631ddf7df4719252037228c3f441243918195ff4c5005ed5d54cb6f8871c02c9d80d84818e30e2ca491393d522fa49da246ead05661401c241365ae914f32c1e44714be4110ea497839c4de6249a0f13e4d585e382f86e5e5af6e70196188b3f3b7d83e3cb2d8fc9528893ffaef97ba3eae633b63baacba999f6f80f4c03b19a17c61ce3e3775b22ecd0abd6c3bcf73339155b79a0b597e1f8c4d2e37418b833d5a405d7d7a371b53706abdf976f7fc0cb4e37aafc216422793806eb32cedc74a790a33aac613737ac3770c7ceda8efa5ade23e86d4b7eb49cc909bab9406500d091035147c3bb0a3a9db15e277a47dc81240bd72be4d1f4851bf7ba11a3a0760f2791de0f61de6a5d61b41713f6feda61c2e9b69d88399cfb6982c4e09c58837673ec7fe6347e4d9096b347679077e7199587e622237ec76615a46aefe16b61467719ade1b647ee2c637f2c3cddc626a8ba1754e299d426259ec058c0ac3a98c33c4c97884356d5710ab302495bc3422e2ae4f390a9497ebc895188585b419ac1856ec0abcf3fba668ce2c76b50cb9271637d8b18b535878a83b9151fc838de246bcf68ba8e2c426ae9476ab19deb2d3e69244c135c534c536bf3d2d4316a3871c2eb134559f4503f5e801514538851cd6c09869f46545c556432f069a9b1efcb648eb8aa495b44315d5cba1e635ae513921385c9eba64657d28676c233ecd8c60a6db2f930861902aae145d5686e604cbf22c1aabf253544b9f2797e94557cb0bcf5574bbcf16c9a61c17a891d9776771dd007f514c08692a97e081b01d31dcc8fde72871a4a5fd9442f3c8ba2447b90bf1ac953dfe8e99c433e8020795d394488281bc674ebd7a84e62b4a9f4d542b2232111a7e7292c1228034a2e5c159b5fa2bc632483639282405e8472922575f97e9ac4d4bd8180f0c165f7ba877f0013bd479e89bd5cc913d879ddbf2eec2da3aa5f526128dc873941eadd833cdd26aab25cff69a325b5c4f75b92dc5fd5452eb58916ce11038e57376dcc28c5ed9027ea4ffcfdfa79413cf13b06bd50ecfb0516ee2f6e423b44190430d0d2c69730892969eb394ba0dd4d03a21de641f4a816fdb569e46d52ff4119861414a1dd1600ffe9df22e1f6d17cc581c1540d8eb04ae4a56292ba619e25a41c8abafe1e78077a6f17cbb01efb144407958262de5431c866fa67690ecf6bc0fe30e03c284393329d2a2b324a464b406a42772f53befc2e3eb5a40011d7412b034340f2785bb6ae9317562634b9b2d57f7ada96333f30e798de96934ad9a826bb4e65de037bed132c7c8b2cabbdf46feda2d580be17ca3b023a286de37257d4313a89f9b7af59f041e7a5b7fe4d91fc443439468efb419fb5fd98b311d23f268fb3fe2deaa6ca8d8624d60ddb6a1b39fec92ce4685f03956568b23371f3c4e6165acee63f0166d47f98ad9a84963d506ee26ecdf3d5a9ad658d479c87f44940d6865f408a767b0210fac3d8bd924dd12eaa779d039a720a768915873e4c35bfc5fb6b15ed4a24c9ad4fabee0ea2eb725e3aee15d3320a1b00390371f676ddaabad9d96f4ba46eaf8b502aed72116a4d06d3994eac64f2c5f437d950679f003dc9d8e6dc9c147bf1757a62a56cac4912a59c50e868ff6996a6983c16acc76320ed9a7cbdb3ffbf0f5a2fe8e0f3141dc75336e0aa59a42af7dc705c6406380122e00e2c22b9f2afe246d8bf14458bb0ca88db2f5f3c79c28b11e9decee41075953672804ed1deadfe02da710c4594229daaf2461393d42555525ae2678ecc2b8131b9509be47c1c5b33ff160efc95dc3ec3d579ab13d2bbc626e0c17a21cde8283de22f3be49e87f6acdf207d525cfb94e3b2d62485a93bf418df0bc75704c9ab9d4760553d2b74c1f774838ec86b4d70b6835c5810e26102e90b91e73217a71c5320f185565c6b63f63974a45f437a7fc8a12bce1762a224196fcd7ddcc32af0511b757654ad54ec952719c021e454920f2de6659ce70911541834d433925065ad608a7f507069c8ae72485b01c10b7ac66ffd4b11e5c825f9b188e7b05ed51c08337308edece6c82207a296ba51886b75673d7fd1b610dea7fae8c0fb96b6c40dd9dda7aaf31865a268000388a6f5e5001108b38e12b636dc997dcbd5edcaedec00d0598f80e741d1dd878e15732c1924074a0ea3aea72e855c5cf971546a1d794dcf315a6dd2fdaddc98cfc7b3ca3c5c6738be37263e4de43592425f91737b58d1d0b0cb5026b228fedcd731724ec874ba2bc8b430c0ea2aa9b7f5829d5153cb85798b5977c6e0ab96a6268d7f78160eb1eee55b0009d0e14dd60ca89884510617f1a6448264c32edd387b102a94599ad8b88910d6a7db65babe581c57942a8d7a33c3bfb1b0a661000633871f14ae908b866da15a8b7a01b1e43ec1ef7bc6449fdf38ff7095438624af0b092aabebefa1821f7de0b2daf00b681a25ba9f52445c33c9845db796591a90557d34a95c506eb246a70489befdde7ebcdafbd7d37f8ccebca33d121056b58a60dff3b52e14ccbb29fdba88c3c22e419db616a60c27502a03f15390fe074460a285321ef2e8a8acfbab1cf8e4e77c9b8cd03d58f0aeecb61a9cd52431186541d7d6723f2e7d9ee57494e0a5891d0b566ba36cf37081c5461044d08bf4d940b8a49b6edc252945208d6e054dedc16d00c7f47597a6083dfdc383e2f6a6a011bb2859a43d6803dc3c874f70867d922aa49f8fd9d631910b2de5b485a8af5fe94976c359d84aadd9c244b610c499b1f2f7385b3e3b67df9200ecba1cce81a3866633723c5f3477606de6aba1a4aea343a28bde242b0d076517e6bcd2cd580219db89fe8a4c9e702ab1c0b08d6f1bbe8dfec3e7ddaa46cceade12b700dd38213639808de6669e437cd7d0a27b631bd1efad4acfb50fbd6197c59916d472aadb64b4fbef4e721b7354c00bba122238e8e0156c393bf62cdcb65057eeb382ab4cf7802423d6226911b790342d531bf0da962117c5a1501b2f5de874f58c32775694896beecf762787cbc3f9befbff1151264a2a08f57c5562f8868aeb3102ebba6a3cd88bbea1f41d30ec34f9c220eadc42540ab9dd1f8639d49d07d77622af6c7f01e601dea25aebccd3e216856fd35907eedc1414bda3c017651bcc8cf17030581984b7c3543a29ce875becb3edbfcf79931ecc068d555c6916b2790064c37bebceb2b6627dc5d5bfee28bd64ae3302b071e7e192b4da08a3fe61826133d01bb4c185e2fc8c4ad243488f6d427aeeea1574fb6ff9acbb3e12b5c75137bee94070eaa6656b90ff5ee3a73379c9bf72b6438edaa68e90c677a72e545971b88b53893592a0d298568b9efcf76c78727079cbb45b1ffba9a1e5d07443714f6362b654f7011b8acf74d7da87e63f7e5ff4a598324f8294db9d77b1cfc54d4ff9f655c1c8cf5c27f8650e1fe42197e415ea6855e70d05e4bf50d0c34b790a2df339502e1a3a7ce8fb9d152f4921f88cff3faac2eaa543055f241031dd28b2a28a491401bc8a3af049e6e8f094c3210a6ac2ed31201dfa5f795c7827921b4ee36a8dc17aa1fcb2f96e813198e066230f8e06fe207b5e9c8ca41ec10395a2be66140e2c5c373541b9ed52b3caf8b482470ae5c312fd1cb41e645bdce320029c3bc42e655048f737cf3e142bac095168f5d6622ce2fcb8da8068a85466da64064721c19c81cd7d64f32d00e12977dee1c88d6719524d2d604b29553169a1b40849a0a3b6a34c32317699ed2ecda116bed45b454253afc6b62b38211cad739ebab2292b696a84219e04a04ef247bd89d77f88e2d67b2e020b5244c52b6e67d2e51a8f62d1e88a1ad3384dc108710768dc161edddf7145efdbdd042aeb0da43eae2b0455d4342ed974b92cd6ffe43b8c14a1b3db6f6e3bb57fb745bcdf6f7b8ff433f6253d1a19abcc9c43869d545c8bdd6fce46c025856bc9c27fa865ce90b7dc55aefa7600068d2d3ee79fdba4e5bc282e397d061b285b59ff5dbd7a18e6c53183c73b4dec97a4e008588e1a544f1cb679eb93a8086f04fdb5248a8d325e8261cdb9524deb95b32b58563e58429f97d8b47a24720e79bf0019dd25b4ef9afa301598a92bdad82029ec85fba889e91ef683288ab92baebc3bee31d80fd485025e7dbdabb63d0a0522571a8714b3e0fd687a34df6ee8453aa02ecb27e6109c16fb800aec6c1c0dced493a8d0541865d44b679b092e86439a168cda33a17cb478b83f88d522d682516a9b51dc0562f3d3bcfe1fa9ee0673b16e4056a488bfb988dc0ea819ad383d97ed781c53ccb39113741a1e6e8b14171f807bed2459d8dd66b9c0a92e64ea6ff254c55f94c7bef09934db9549bd60a549827c62f7c1a8cda85ea2675d8ec295534b93d646ae1edc17dfac56a47c6dfa81f45954c0b5bc6f8df01107bd1e59f511fe6c4656136d988181efc4a772b", 0x1000}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="8880000000000000170100000200000072000000741fdf54dfdecb29680b943bb68ed7c80f0bd942d414b0b6bbc18f78c3e8e4812ded88c754acab19ddaf222d67b7a025d741935fdf824efda8eb2f5e4959b0f7efdef27e7349a3bc15fba75aa3dcd3fbc416dee7def78f7143ea9497e1a0df8ea3a05dc6e1dfc0b41bc7ac88510b079f901500001800000000000000170100000400000005000000000000001800000000000000170100000400"/184], 0xb8}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)="5d6297904722811b61e9f48ec464980f864e18e94db3a38fa223d37b23496763e038cf057053efa47de4cf5955141a98cc89e78afaada4bdf58e04aa26bfd9eb43921698dec3a2a02bf5352ec0d34d25a128dd6cbba88051a8140a5b629aed04bc5d183be8619c72e47efe22512483cedce67d7e293b5bed47e04bc24b41574d720ea4aa789466761175f32cc27aa1d7c3769c8b1a9049daac69ae699e772c5a10876595853bdd794971c62b71de542ff365e59964a07109b90048f8fd2ab97cba1872dc62466113cebd957c19d76f0abbecebdcfcaeb65b40af2f49bec582f93881212ff16d9635aa", 0xe9}, {&(0x7f0000000800)="42314c2f13686c47d6b270463428889dd8654e1f10ab", 0x16}, {&(0x7f00000019c0)="2d7bfaffffff7f000000008caa5986149acd8e0813675597860300a1edc930291501808e1edd90cbb869aaf45872211ee6259d9f9e9159dc14f21fc44e73134e5bd964faa9cd3e31f7001ad987a6953d03fd98dd8c6b35c12958600e0f22c2b0ef952657d36d51d68e74d22fa6a245c97d5a5ac52235c404864516d337a331b7c39cb027", 0x83}], 0x3, &(0x7f0000002d80)=ANY=[@ANYBLOB="180000000000000017010000040000000000000000000000180000000000000017010000030000000100000000000000a0000000000000001701000002000000890000c756c2a0cb9ca577eab229a2d1ad00b470bc031810d4905760f4271f7acf2c742e5b220f957d21f169bd563f6e37cb38b5bf57ce1e617ed28542d879058f9e70056a5e094031b55b6ec14ed6e554f6e2be6a307f1a2f2d869e0986f8da2d461b69031a27e75900c9303844d16d0e53dfe0e277d5aaf1627c04a51ab04548bf6d4b6e3ea95703d87e3400000018000000000000001701000003000000000000001800000000000000170100000400000004000000000000007e9075061dfb13e934740b380bb37b9aa34921cae1f8efdc71424e4df45066e155c2ea135bb41195fc978b638adcda37bf02f44940355b1e2e09dfcef616cebc8f17734e3fe66297b5119aa7ba0518e04b0cd4de3c25f5b25ffdfb6ded20d6ba3e2f1332be8416f792485a15109bbeccb8293eaa1391249a5edf0e953dbd988bb1674042df125f9c5ad1cbc7e2018877b6cfc819b49b128d5230e03496adeaab7ec9dd53865769e98b2fda3c517fd064f7c1615e58250783006308bdd25a7f7562c33a469d1c2d720caf2963e7c12533849cfeed897404601425dae2b51fb15b3cc978f67cdb872c3fe1cbbb11d910eb8bce7a28a4b250a34f90a0dd9ac61ef3a0b1b28d0e8178bf9eb15659c857df4bc59229c3f7687a8ad694cf4e042bd400000000000000000000000000000000d2d449cd1143f2c516d7c55b4fd2b5e8089c3866351e11fe002697c54b32d84ef87b913eb472570132006667c706cf4135ef2e8b2a19b1a6993ddc"], 0x100, 0x4000000}, {0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="de92ac9265f1fb005f11b1330f5dd270d6de0c693dc6a88e7a39fbe6ebf44d570b65ce781a81353a709a230125c268e75d270c0f649324c97ba7e97420fcd8b26775a7b61d6dfed888011119b1cac05baabff8c679c8e7553648ea53858a4019371e60883e576d57837170b2e1", 0x6d}, {&(0x7f0000001b40)="b3daa5093135c16d18226b372b4465b18437b6b78d10a140a10eb7ce457538993cbced610694a3063719e1adc02ad3b5e61eaf0832d77b7cd4fd6df42ffd457bc473706e86ba1211afe1725db24f5bab1e0f83c21e9ce37af1e05b9f64f239795ec0c6aabcdb0dd3272f52fdf3e9b5ffe9e0ebb62641f54692406e7c5474afd69c3025bc1b02ca7e58874c9643b7889c4d02b16a6c0577b541666e15fabff775d6", 0xa1}, {&(0x7f0000001c00)="45d5382f28e7ae8a985e7de21cc9909097b9c0a101184b218d5396d90265ebe313e7053e4ed8f0bb87f814781c7201b5390681eef9a4bceaf5ae1ab543322e116112c570faa6e737b6516952b587d4ebe63e165a6885a3c4b880340d57691560a318df13ecc0329a0a4115d2c4768b959f578d94db69f900acfd730b54ca013311e8", 0x82}, {&(0x7f0000001cc0)="64aa67f6d49510080889118a663ce74765e0920296cfda7d909965d45f65b8bec60b25912f8942b412fc24de4bbd2a218472c9bea6777b25ed3bf8f07abff20f6f024c09224878e8968bff5f7b32dbf289ae248236c12e04797f5cbb90a0ff86c3f5caea0bc386bcf02796f48048fc8817c16f97de4d328b8ae46fd49d8591e56fed0c1f81b8d2a21c6643865ffc1f8929b1dec3dd2feaf070a870720e8e6b93649450c6a803dc22c2d2375151905c412656254aecc4f5fa957270f744484e45cc6d2fb2571cf947efc493035c122582acdaf79488c23f31c2f011b18ecc9193636c8eb805d8407325e12fe1d8534fae10c2585d722973", 0xf7}, {&(0x7f0000001dc0)="f028c320083bc4de19fd84afdb81fc811fa010c03cd3087d5b32b63040d000ce03da71bb732f32b8661d42af07f8de19d8bc42b6e9292f79ec2c54d13d1c5a1c2d5a9fb8d64d8dbc9d0e2357fbb3dba4c90991ba6000c73d47c241bc8435d6f7919402826af5d3366f4f55eca84cb381b233370d74fdf4b725c72f8788f92c5fad500692f7", 0x85}, {&(0x7f0000001e80)="74bff3896c410f4d030cb7177772400e52ff58fb169269c6221f9333244fdb26a5c878dc18cbdc26ceb2685420ab02e0e8c5767fa00d477eee3a1bd0e9e38ebc9adcd38911f7abffdf756efa8ab5b4e268efa9cdf24421720a683b8c3b0d31367355116ade08c15388cb7230cea9df85f9e24fdfda", 0x75}, {&(0x7f0000000880)="f416e717a1279fcb", 0x8}], 0x7, 0x0, 0x0, 0x40000000}, {0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001f80)="183af20daf0de2316580bbe3bb4034ac9b09e6c7a4ebb541f1cb23f9d2f671e6515006700d3ebcf09b55a3aa5cc9842e412695b3a8f0bb85e7349340468e689a822eabc6b50fb6b1bd64b2c4ab2f331c5851c48cbee782f8d0eacacfd56639051e306a39e618561199efcb3b0819495550713b9af6513df90e31b37c50c4331a366faf597d073d7ecbaa27e6748d177447d1e4ac1e69269e516f26adfd00a9dc89a6e0924b38e25f5267dbe4a0cccbf488fd3b9034dd726e82185800a5fd54782a06149bdc1bd47c", 0xc8}, {&(0x7f0000002080)="faa2c002eaa77c6f0faa65f869655b1564be0ff95085fc5b4eb131c59659dec4333e304ca2e52b019c77965a45a74458c77dc416361566e5db586c7d033ff8f7e61b28612be41281e2d242103f448a0367beb3d4bc6eda3aa8b7b59d430e825f876561ae76be91c42c513d209544eb04b46cb526f657b420653998197fa5f070581e608ced4a5dafa747d4afc672fa38bb420661ea4d9821c45bc2c2f3b34419fc883b837bb526284853bed598c88219fbb4f5469d268d8e96b724abddb1e47f4138edd3567231238bfe4610cf382baaee23bb4f5831cc06baa4b0fd2921bc", 0xffffffdb}, {&(0x7f0000002180)="6c4fffc932f39413fd6b196dc664cf9cc593fa7b11f767efe22e79007af6537619bc4802964823e8df278c9472711f09f5bf5ae5bd0fd9d6cd848b9d89aaf08b64d8722c9dc8377480e32deb7a89c61426f5c2218539491b65d076159028e78418a1e9bf265d90db37e2ebfecaadabc983170bf8d756a354dcab4bcb7f97349d3109e6274de3fbfb40811074dc2c3f0c5f43fe5699372335465307ade512a480b60697e29d9a1cecf88fc331bf9d6807f328a5273d6b5fb5290614472ddef4fb76b3fdf3335fc5b01103b4bfd73decf2fa22d5ccbb96368710af71ee6c2d76c4382387c3", 0xe4}, {&(0x7f0000002280)="8673a993114524c6d0a08855851ef7d89ab4f7ce34ebf0551d57d8a7aaf559c5a226a8ce13eb8c3a601d726e2f336bd9ad690e050939", 0x36}, {&(0x7f00000022c0)="e51ae46cb7acedb92ddb3daab4f64717a934f2b8b1efc52b265df236bc58e5ac206a072bc96a2d43fc6bd6fac336a8f0354162180d2f136f57e03695c75e2a92df1b7ec05c166d268dd4538f6e91cde5d990cbf0d4c239acafb4ddebddc5506ccb6ebe8768e601084c4610a7e0e4564497818ee3829b952cc1d6daee38106a6f5801292a5735aeb98f8bfb4c06ad906996ed1cfec778f38869fccfbb28a5b891681e0cb7a91f3da2c5684a9f4a949ca7d03322d82ddc177b4e5511371f5fa34ea170e06690e8e873a7a5f35df220992beb2f7a3ce42179cea0f34e83819e43265c8dd3b335c63fad49", 0xe9}, {&(0x7f00000023c0)="6ca7335c7f422540cbbab587641a5c122de81575e3992794587bbe988301d7882234b6622f824171fa4e6311650a8d2129f62e35eb00a724db3ced0b3bf6961de1aa7ca1fc799bd432830fde40258d935fbd1a1540340a940ca24310db704dfdfa96faf026da978fb7c406505506d5cd85c107e7a221936138f7ab19d33b494f5dfdce452c26537c9642bcce8dd8e39951d070bb1c0aae2cacba101510efc25478ff2491651b22af63a050148a05a18b74ed31a80a80ac425c57532a6a55fa9a69d46e3ca87317e40d", 0xc9}], 0x6, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0xb97}, @iv={0x70, 0x117, 0x2, 0xfffffe3c, "6fbc29d857fc5fc9ee635e6c0292a0c77a9db31d2ec7af53d96f97a05032831117d7000e725e63240d20eaa5364e01b5101e947b69b35ec296a861a2a9107c3659a0916bc68b19d9345019db0f97b965e32b8e03ce47f5ef43b5"}, @op={0x18, 0x117, 0x3, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}], 0x118, 0x480d0}, {0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="7e332b92b18ac4cdd9b11c95d94451fd22d177c67205a843aaeeaf34511de7c485b93a63d2a6d0f9c1a5fc7e22bc5cbf2a67f6468589b2a29104ade4db7ec6d0c7dee9de95101d41d20a39d5708005960402df4841d85fb9403aaa67fa80cb0e55c0615eb814ae8dc3ca4f3f9adc0b51559a2ed74e02fececec403bbca1eb04c6dacbac2fb59860000373e4e81d890cb89776e2d1e4db3d97b0d555bb95e2f5b3741d1fd", 0xa4}, {&(0x7f0000002740)="440873dc33556336b70db91b9d50f993f3687d80781ff6cb1401aa743b52e2644ec4e41d00f42a1f2cff", 0x2a}], 0x2, &(0x7f00000027c0)=[@iv={0x18}, @op={0x18}, @iv={0x18}], 0x48, 0x4004040}], 0x6, 0x40081) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x54d00) ioctl$KVM_RUN(r13, 0xae80, 0x0) 16:37:48 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) [ 3094.710120] net_ratelimit: 16 callbacks suppressed [ 3094.710125] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.720216] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.725306] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.730353] protocol 88fb is buggy, dev hsr_slave_1 16:37:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x1ff}) 16:37:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x8000, 0x4cb, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:37:48 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) [ 3094.880129] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.885301] protocol 88fb is buggy, dev hsr_slave_1 16:37:49 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) [ 3095.030135] protocol 88fb is buggy, dev hsr_slave_0 16:37:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) ioctl$TIOCCONS(r0, 0x541d) 16:37:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x108c0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000080)=0x4) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x348802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x61, 0x0, &(0x7f0000000040)=0xff09) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x5, 0x5ae, [0x0, 0x20000900, 0x20000a26, 0x20000cd2], 0x0, &(0x7f00000001c0), &(0x7f0000000f00)=ANY=[@ANYBLOB="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"]}, 0x64e) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x9, 0x81, 0x1, 0x7f, 0x3, 0x6, 0x3f, 0x24, 0x9, 0x3, 0xe4, 0x37, 0x2, 0x1, 0x41, 0x2}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xf3e1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:37:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) [ 3095.510140] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.515327] protocol 88fb is buggy, dev hsr_slave_1 16:37:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b61, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x19, 0x11, 0x119}) ioctl$TIOCCONS(r0, 0x541d) 16:37:49 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x80, 0x3ff, 0x6, 0x3}, 0xc, [0xfff, 0x10001, 0x9, 0x1, 0x2eb0c61f, 0x4, 0x3e79ca19, 0xd7, 0x7, 0x100, 0x2, 0x1ff, 0x8, 0x10001, 0x7ff, 0x6, 0x2, 0x3, 0x100, 0x551, 0x5, 0x81, 0x3, 0x1000, 0x2, 0x2, 0x6, 0x4, 0x5, 0x7fff, 0xffffff01, 0x9, 0x101, 0x3, 0x1f, 0xece, 0x10001, 0xffff, 0x0, 0xec, 0x8, 0x7, 0x7fff, 0x1, 0x8, 0xdb, 0x101, 0x695c, 0x7f, 0x10040000, 0x5, 0x4, 0x100, 0xd3eb, 0x7, 0x81, 0x0, 0x7, 0x0, 0x2, 0xdb, 0x6, 0x1, 0x1], [0x0, 0x20, 0x5200, 0x7, 0x3f, 0x8, 0x10001, 0x4, 0x818, 0x1, 0x5, 0xb5f, 0x5, 0x7ff, 0x0, 0x6, 0x20, 0x0, 0x9, 0x20, 0x1, 0x7, 0x8, 0x7, 0x2, 0x8, 0x5992, 0x3, 0x4, 0x75, 0x5f, 0x0, 0x101, 0xffffffff, 0x4, 0x80000000, 0xaa7, 0x7, 0x9, 0x1, 0x2, 0x40, 0x800, 0x7, 0xd78f, 0x5, 0xd429, 0x6, 0x1, 0x10000, 0x1f, 0xf12f, 0x1, 0xdf1, 0x2b25, 0x81, 0x9, 0xc5, 0x1, 0x10000, 0x7fffffff, 0xc3c4, 0x4, 0x5], [0x8, 0x3f, 0x1000, 0x401, 0x5e, 0x1, 0x80000000, 0x10000, 0x0, 0xfffffffe, 0x0, 0x49, 0x0, 0x8000, 0x9, 0x8, 0x10000, 0x10001, 0xc7c7, 0x3, 0xc375, 0x2, 0x1, 0x1, 0x4, 0x0, 0x7, 0x4, 0xfffffffa, 0x2, 0x3, 0xffffffff, 0x8, 0x5, 0x7, 0x8001, 0x4, 0x56e2, 0x3, 0x9, 0x8, 0x3, 0x401, 0x9, 0x401, 0x1ff, 0xffff, 0x3, 0x0, 0x6, 0x8001, 0x6, 0x0, 0x800, 0x672d, 0x5, 0xcc6, 0x6, 0x3, 0x5, 0x9, 0x200, 0xffff, 0x1], [0xfff, 0x7, 0x8, 0x800, 0x1, 0x80000001, 0x4, 0x800, 0x4, 0xffff, 0x367, 0x7a, 0x8, 0x2, 0x8, 0xffffffff, 0x8, 0x7, 0x1, 0x0, 0x4, 0x7cf, 0x0, 0x0, 0x400, 0x2, 0x81, 0xffff0000, 0xfe, 0x20, 0x2, 0x0, 0x20, 0x0, 0x1000, 0x10000, 0xffff, 0xaa, 0x40, 0x2, 0xfff, 0x1, 0x10001, 0x5, 0x4, 0x7fffffff, 0x0, 0x7, 0x9, 0xffff0000, 0x8, 0x80000001, 0x7, 0x7, 0x3, 0xfffffe00, 0x3, 0x2, 0x6, 0x0, 0x8, 0x8, 0x1, 0x2c58]}, 0x45c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x48200, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) 16:37:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 16:37:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000200)=0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000240)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r8, 0x81713000) sendfile(r7, r6, 0x0, 0xc0000008000000b) bind$rxrpc(r6, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @rand_addr="d9f6358a2bd829722c822c3436b9424b", 0x101}}, 0x24) sendfile(r5, r4, 0x0, 0xc0000008000000b) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000140)={[{0x2, 0x100, 0x9, 0x4, 0x1f, 0x8, 0x4, 0x9, 0xfb, 0x41, 0x4, 0x1, 0x7ff}, {0x0, 0xf, 0xa0, 0x9f, 0xff, 0x7f, 0x6, 0x1, 0x7c, 0x6, 0x8, 0x1, 0x4}, {0x2b, 0x9, 0x7, 0x80, 0xc1, 0x8, 0x6, 0xff, 0x5, 0x80, 0xa1, 0x2, 0x40}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3095.870115] ================================================================== [ 3095.870229] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x288/0x550 [ 3095.870238] Read of size 32 at addr ffffffff87064ba0 by task syz-executor.4/6848 [ 3095.870241] [ 3095.870252] CPU: 1 PID: 6848 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 3095.870259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3095.870263] Call Trace: [ 3095.870276] dump_stack+0x142/0x197 [ 3095.870290] ? fbcon_get_font+0x288/0x550 [ 3095.870303] print_address_description.cold+0x5/0x1dc [ 3095.870314] ? fbcon_get_font+0x288/0x550 [ 3095.870324] kasan_report.cold+0xa9/0x2af [ 3095.870337] check_memory_region+0x123/0x190 [ 3095.870347] memcpy+0x24/0x50 [ 3095.870357] fbcon_get_font+0x288/0x550 [ 3095.870370] ? display_to_var+0x7e0/0x7e0 [ 3095.870380] con_font_op+0x1d5/0x1060 [ 3095.870394] ? con_write+0xc0/0xc0 [ 3095.870409] ? kasan_check_write+0x14/0x20 [ 3095.870420] ? _copy_from_user+0x99/0x110 [ 3095.870430] vt_ioctl+0x179f/0x2170 [ 3095.870439] ? avc_has_extended_perms+0x8ec/0xe40 [ 3095.870448] ? futex_wake+0x134/0x430 [ 3095.870458] ? complete_change_console+0x360/0x360 [ 3095.870468] ? avc_ss_reset+0x110/0x110 [ 3095.870485] ? tty_jobctrl_ioctl+0x44/0xc10 [ 3095.870493] ? complete_change_console+0x360/0x360 [ 3095.870511] tty_ioctl+0x841/0x1320 [ 3095.870524] ? tty_vhangup+0x30/0x30 [ 3095.870546] ? __might_sleep+0x93/0xb0 [ 3095.870554] ? __fget+0x210/0x370 [ 3095.870569] ? tty_vhangup+0x30/0x30 [ 3095.870579] do_vfs_ioctl+0x7ae/0x1060 [ 3095.870588] ? selinux_file_mprotect+0x5d0/0x5d0 [ 3095.870598] ? lock_downgrade+0x740/0x740 [ 3095.870608] ? ioctl_preallocate+0x1c0/0x1c0 [ 3095.870619] ? __fget+0x237/0x370 [ 3095.870633] ? security_file_ioctl+0x89/0xb0 [ 3095.870645] SyS_ioctl+0x8f/0xc0 [ 3095.870655] ? do_vfs_ioctl+0x1060/0x1060 [ 3095.870668] do_syscall_64+0x1e8/0x640 [ 3095.870677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3095.870693] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 3095.870701] RIP: 0033:0x45a909 [ 3095.870707] RSP: 002b:00007f02e3d57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3095.870719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 3095.870725] RDX: 0000000020000400 RSI: 0000000000004b72 RDI: 0000000000000004 [ 3095.870732] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3095.870738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02e3d586d4 [ 3095.870744] R13: 00000000004c3a55 R14: 00000000004d8f90 R15: 00000000ffffffff [ 3095.870763] [ 3095.870766] The buggy address belongs to the variable: [ 3095.870793] fontdata_8x16+0x1000/0x1120 [ 3095.870795] [ 3095.870799] Memory state around the buggy address: [ 3095.870807] ffffffff87064a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3095.870815] ffffffff87064b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3095.870822] >ffffffff87064b80: 00 00 00 00 fa fa fa fa 06 fa fa fa fa fa fa fa [ 3095.870825] ^ [ 3095.870832] ffffffff87064c00: 05 fa fa fa fa fa fa fa 06 fa fa fa fa fa fa fa [ 3095.870840] ffffffff87064c80: 00 00 03 fa fa fa fa fa 00 00 00 00 00 00 00 00 [ 3095.870844] ================================================================== [ 3095.870847] Disabling lock debugging due to kernel taint [ 3095.873823] Kernel panic - not syncing: panic_on_warn set ... [ 3095.873823] [ 3095.873837] CPU: 1 PID: 6848 Comm: syz-executor.4 Tainted: G B 4.14.158-syzkaller #0 [ 3095.873842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3095.873845] Call Trace: [ 3095.873858] dump_stack+0x142/0x197 [ 3095.873873] ? fbcon_get_font+0x288/0x550 [ 3095.873882] panic+0x1f9/0x42d [ 3095.873892] ? add_taint.cold+0x16/0x16 [ 3095.873907] ? ___preempt_schedule+0x16/0x18 [ 3095.873925] kasan_end_report+0x47/0x4f [ 3095.873938] kasan_report.cold+0x130/0x2af [ 3095.873951] check_memory_region+0x123/0x190 [ 3095.873962] memcpy+0x24/0x50 [ 3095.873974] fbcon_get_font+0x288/0x550 [ 3095.873988] ? display_to_var+0x7e0/0x7e0 [ 3095.874004] con_font_op+0x1d5/0x1060 [ 3095.874019] ? con_write+0xc0/0xc0 [ 3095.874034] ? kasan_check_write+0x14/0x20 [ 3095.874044] ? _copy_from_user+0x99/0x110 [ 3095.874057] vt_ioctl+0x179f/0x2170 [ 3095.874070] ? avc_has_extended_perms+0x8ec/0xe40 [ 3095.874080] ? futex_wake+0x134/0x430 [ 3095.874092] ? complete_change_console+0x360/0x360 [ 3095.874102] ? avc_ss_reset+0x110/0x110 [ 3095.874118] ? tty_jobctrl_ioctl+0x44/0xc10 [ 3095.874128] ? complete_change_console+0x360/0x360 [ 3095.874140] tty_ioctl+0x841/0x1320 [ 3095.874151] ? tty_vhangup+0x30/0x30 [ 3095.874169] ? __might_sleep+0x93/0xb0 [ 3095.874179] ? __fget+0x210/0x370 [ 3095.874195] ? tty_vhangup+0x30/0x30 [ 3095.874206] do_vfs_ioctl+0x7ae/0x1060 [ 3095.874216] ? selinux_file_mprotect+0x5d0/0x5d0 [ 3095.874224] ? lock_downgrade+0x740/0x740 [ 3095.874236] ? ioctl_preallocate+0x1c0/0x1c0 [ 3095.874247] ? __fget+0x237/0x370 [ 3095.874261] ? security_file_ioctl+0x89/0xb0 [ 3095.874272] SyS_ioctl+0x8f/0xc0 [ 3095.874282] ? do_vfs_ioctl+0x1060/0x1060 [ 3095.874294] do_syscall_64+0x1e8/0x640 [ 3095.874302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3095.874317] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 3095.874326] RIP: 0033:0x45a909 [ 3095.874332] RSP: 002b:00007f02e3d57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3095.874343] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 3095.874349] RDX: 0000000020000400 RSI: 0000000000004b72 RDI: 0000000000000004 [ 3095.874356] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3095.874362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02e3d586d4 [ 3095.874369] R13: 00000000004c3a55 R14: 00000000004d8f90 R15: 00000000ffffffff [ 3095.875881] Kernel Offset: disabled [ 3096.419360] Rebooting in 86400 seconds..