Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.177' (ECDSA) to the list of known hosts. 2020/09/25 21:03:26 fuzzer started 2020/09/25 21:03:26 dialing manager at 10.128.0.105:39505 2020/09/25 21:03:26 syscalls: 3234 2020/09/25 21:03:26 code coverage: enabled 2020/09/25 21:03:26 comparison tracing: enabled 2020/09/25 21:03:26 extra coverage: extra coverage is not supported by the kernel 2020/09/25 21:03:26 setuid sandbox: enabled 2020/09/25 21:03:26 namespace sandbox: enabled 2020/09/25 21:03:26 Android sandbox: enabled 2020/09/25 21:03:26 fault injection: enabled 2020/09/25 21:03:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/25 21:03:26 net packet injection: enabled 2020/09/25 21:03:26 net device setup: enabled 2020/09/25 21:03:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/25 21:03:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/25 21:03:26 USB emulation: /dev/raw-gadget does not exist 2020/09/25 21:03:26 hci packet injection: enabled 2020/09/25 21:03:26 wifi device emulation: enabled 21:05:08 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) getpeername$inet(r0, 0x0, &(0x7f0000000080)) syzkaller login: [ 142.416640] audit: type=1400 audit(1601067908.160:8): avc: denied { execmem } for pid=6515 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:05:08 executing program 1: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080000000000000000000000000000100002"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001d0001410000001def000c0001"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21:05:08 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x805c6103, &(0x7f0000000080)) 21:05:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73ff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x5b93, 0x0, 0xa0, 0x0, @tick, {}, {}, @connect}], 0x1c) 21:05:08 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x42800) 21:05:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd632124b0d6452d791cc0576c8624862bd395fea6432d69e55d761fafbb02b4dd32cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99", 0xb3}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 143.622095] IPVS: ftp: loaded support on port[0] = 21 [ 143.767053] chnl_net:caif_netlink_parms(): no params data found [ 143.803066] IPVS: ftp: loaded support on port[0] = 21 [ 143.980970] IPVS: ftp: loaded support on port[0] = 21 [ 143.988467] chnl_net:caif_netlink_parms(): no params data found [ 144.146100] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.155358] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.164741] device bridge_slave_0 entered promiscuous mode [ 144.175284] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.182268] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.190455] device bridge_slave_1 entered promiscuous mode [ 144.216180] IPVS: ftp: loaded support on port[0] = 21 [ 144.294123] IPVS: ftp: loaded support on port[0] = 21 [ 144.338397] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.344777] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.353383] device bridge_slave_0 entered promiscuous mode [ 144.369302] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.375668] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.397563] device bridge_slave_1 entered promiscuous mode [ 144.435634] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.450438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.487970] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.498047] team0: Port device team_slave_0 added [ 144.526090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.533780] chnl_net:caif_netlink_parms(): no params data found [ 144.543283] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.550625] team0: Port device team_slave_1 added [ 144.576150] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.608050] IPVS: ftp: loaded support on port[0] = 21 [ 144.653574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.661327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.686586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.701722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.708066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.733412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.770873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.794513] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.802273] team0: Port device team_slave_0 added [ 144.809528] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.817689] team0: Port device team_slave_1 added [ 144.828478] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.952937] chnl_net:caif_netlink_parms(): no params data found [ 144.962838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.969906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.995847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.014827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.021434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.046668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.061276] device hsr_slave_0 entered promiscuous mode [ 145.068146] device hsr_slave_1 entered promiscuous mode [ 145.074372] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.093387] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.101470] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.109176] device bridge_slave_0 entered promiscuous mode [ 145.115837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.123790] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.152417] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.159593] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.168374] device bridge_slave_1 entered promiscuous mode [ 145.174677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.297474] device hsr_slave_0 entered promiscuous mode [ 145.303622] device hsr_slave_1 entered promiscuous mode [ 145.319372] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.332185] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.344616] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.372201] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.385790] chnl_net:caif_netlink_parms(): no params data found [ 145.426978] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.434883] team0: Port device team_slave_0 added [ 145.469802] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.479057] team0: Port device team_slave_1 added [ 145.562245] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.569343] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.576383] device bridge_slave_0 entered promiscuous mode [ 145.613426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.620171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.637003] Bluetooth: hci0: command 0x0409 tx timeout [ 145.647679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.662080] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.668553] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.675549] device bridge_slave_1 entered promiscuous mode [ 145.699780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.706024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.732562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.743453] chnl_net:caif_netlink_parms(): no params data found [ 145.772641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.796710] Bluetooth: hci1: command 0x0409 tx timeout [ 145.810508] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.825008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.880556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.908088] device hsr_slave_0 entered promiscuous mode [ 145.913767] device hsr_slave_1 entered promiscuous mode [ 145.935444] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.942531] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.950205] device bridge_slave_0 entered promiscuous mode [ 145.956520] Bluetooth: hci2: command 0x0409 tx timeout [ 145.957966] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.968553] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.976010] device bridge_slave_1 entered promiscuous mode [ 145.992052] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.999882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.008976] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.050381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.057890] team0: Port device team_slave_0 added [ 146.090759] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.105971] team0: Port device team_slave_1 added [ 146.116642] Bluetooth: hci3: command 0x0409 tx timeout [ 146.134702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.155543] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.164568] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.173322] device bridge_slave_0 entered promiscuous mode [ 146.184218] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.191708] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.199204] device bridge_slave_1 entered promiscuous mode [ 146.236530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.245674] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.266111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.272588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.276522] Bluetooth: hci4: command 0x0409 tx timeout [ 146.298949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.314979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.341516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.349620] team0: Port device team_slave_0 added [ 146.355977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.364344] team0: Port device team_slave_1 added [ 146.374952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.381487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.406819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.425406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.446735] Bluetooth: hci5: command 0x0409 tx timeout [ 146.464649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.495575] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.502888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.510225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.535663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.551090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.557382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.583134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.594110] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.602851] team0: Port device team_slave_0 added [ 146.609749] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.617667] team0: Port device team_slave_1 added [ 146.634427] device hsr_slave_0 entered promiscuous mode [ 146.640304] device hsr_slave_1 entered promiscuous mode [ 146.658437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.681627] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.689179] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.698623] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.715628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.722031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.747611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.760028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.766570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.792881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.804417] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.843763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.899015] device hsr_slave_0 entered promiscuous mode [ 146.904829] device hsr_slave_1 entered promiscuous mode [ 146.913405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.922884] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.951579] device hsr_slave_0 entered promiscuous mode [ 146.957908] device hsr_slave_1 entered promiscuous mode [ 146.964096] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 147.012378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 147.028800] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.049225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.087220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.127125] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.139483] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.169605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.179457] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.200878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.209409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.217246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.224111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.261246] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.267771] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.291691] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.298086] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.318085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.342662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.351625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.360422] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.366937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.378600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.387882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.403287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.411141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.419255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.427213] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.433538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.441665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.450477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.458349] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.464712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.474688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.484367] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.501867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.509515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.519898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.527722] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.534060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.544202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.552510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.562833] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.578351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.586616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.594618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.611216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.621772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.631402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.648030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.671728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.681137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.689903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.698811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.712367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.716441] Bluetooth: hci0: command 0x041b tx timeout [ 147.723912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.733687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.744791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.756065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.766010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.774206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.782479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.791193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.801125] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.811366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.827716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.834791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.845127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.853375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.868608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.877251] Bluetooth: hci1: command 0x041b tx timeout [ 147.887797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.897179] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.903272] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.910567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.918672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.926051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.934201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.943916] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.951383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.977047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.991482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.010437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.018698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.026231] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.032669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.036491] Bluetooth: hci2: command 0x041b tx timeout [ 148.040306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.052388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.060745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.070722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.089454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.099984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.109642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.122651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.130866] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.137271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.144259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.152700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.170005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.178150] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 148.190984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.196808] Bluetooth: hci3: command 0x041b tx timeout [ 148.202403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.211289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.219845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.228405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.237033] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.243048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.254503] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 148.271254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.280265] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.288222] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.297242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.304298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.311902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.319143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.330843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.344982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.355503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.363242] Bluetooth: hci4: command 0x041b tx timeout [ 148.373662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.385528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.392286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.401472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.409476] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.415816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.422873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.430825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.442114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.460282] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.467065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.474380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.484115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.492634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.500875] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.507279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.516623] Bluetooth: hci5: command 0x041b tx timeout [ 148.522731] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 148.531006] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 148.539127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.552840] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.562235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.569253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.575918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.584221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.592455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.600942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.608069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.614925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.624423] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 148.638736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.652268] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.658388] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.666147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.677327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.688104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.700461] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 148.709947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.719152] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.728594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.737261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.744284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.753022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.761634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.769532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.777493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.784349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.791867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.800066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.808358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.815913] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.822305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.829932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.844897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.854496] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.861688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.873758] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.881171] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.896457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.897267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.916115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.935745] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 148.951803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.961339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.970866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.979196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.987237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.994976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.003136] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.009581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.018252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.025738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.033149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.041196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.049628] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.055961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.065824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.079400] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.091567] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 149.100718] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.108165] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.120375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.127692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.135306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.143446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.151729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.160277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.171526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.183393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.191997] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 149.200016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.213902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.221873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.232693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.240643] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.247054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.254058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.261700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.272016] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.279110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.287735] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.295824] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.308566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.316015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.323560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.331602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.339524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.346222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.364521] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.373292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.380540] device veth0_vlan entered promiscuous mode [ 149.391900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.409793] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 149.417284] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.424188] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.439407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.458869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.472159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.482850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.497481] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.508062] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 149.525674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.537425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.544955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.552226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.559558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.567160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.574805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.582079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.589500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.602403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.612701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.627663] device veth0_vlan entered promiscuous mode [ 149.634849] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.644369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.655265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.663139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.671459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.679338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.690821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.699366] device veth1_vlan entered promiscuous mode [ 149.705522] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 149.720055] device veth1_vlan entered promiscuous mode [ 149.726240] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 149.735781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.746786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.760724] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 149.769096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.783019] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 149.790628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.797607] Bluetooth: hci0: command 0x040f tx timeout [ 149.804635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.812789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.820279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.827860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.835555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.843388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.851207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.858844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.866450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.881184] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.890289] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.901796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.912487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.923280] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.944046] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 149.954675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.964107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.972480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.980804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.989567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.998040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.005411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.013920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.022239] Bluetooth: hci1: command 0x040f tx timeout [ 150.032852] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 150.040369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.055149] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 150.063479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.072744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.094268] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.105822] device veth0_macvtap entered promiscuous mode [ 150.113972] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.121352] Bluetooth: hci2: command 0x040f tx timeout [ 150.144401] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 150.160595] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 150.171858] device veth1_macvtap entered promiscuous mode [ 150.189056] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 150.195255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.204188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.212805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.221132] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 150.230582] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.238108] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.244682] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.257063] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.268970] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 150.278397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.279257] Bluetooth: hci3: command 0x040f tx timeout [ 150.288108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.299059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.307553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.314950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.322964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.330156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.337831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.349240] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.357704] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.364559] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.374076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.388730] device veth0_macvtap entered promiscuous mode [ 150.395267] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.407760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.418573] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.429107] device veth0_vlan entered promiscuous mode [ 150.437245] Bluetooth: hci4: command 0x040f tx timeout [ 150.442190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.452795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.460836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.469308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.477792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.484837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.494635] device veth0_vlan entered promiscuous mode [ 150.502702] device veth1_macvtap entered promiscuous mode [ 150.509500] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 150.518301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 150.532553] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.546804] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 150.558088] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.569643] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 150.579331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.595045] device veth1_vlan entered promiscuous mode [ 150.600915] Bluetooth: hci5: command 0x040f tx timeout [ 150.613169] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.619899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.628665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.636060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.645267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.653863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.662417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.678235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 150.694777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.705000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.716061] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 150.723629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.733214] device veth1_vlan entered promiscuous mode [ 150.740501] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.753026] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.761613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.771653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.781773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.792584] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 150.801547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.811181] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 150.822845] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 150.833855] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 150.855531] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.864350] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.871472] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.879471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.887631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.894796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.903295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.911771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.920159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.952457] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.961553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.978887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.990144] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 150.998434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.011981] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.025726] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 151.034134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.044044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.053440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.062083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.080021] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.092020] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.102512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.116738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.123765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.132776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.140927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.149113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.159592] device veth0_macvtap entered promiscuous mode [ 151.166158] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.177853] device veth0_vlan entered promiscuous mode [ 151.188657] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 151.195854] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 151.203067] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 151.224178] device veth1_macvtap entered promiscuous mode [ 151.232254] device veth0_macvtap entered promiscuous mode [ 151.242275] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.255749] device veth1_macvtap entered promiscuous mode [ 151.271883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.283671] device veth1_vlan entered promiscuous mode [ 151.298827] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 151.314827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.326744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.334083] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.343720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.351754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.361363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.369274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.392241] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.402291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.415662] device veth0_vlan entered promiscuous mode [ 151.425988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.437358] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.448078] device veth0_macvtap entered promiscuous mode [ 151.454404] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.468885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.479216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.488412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.498253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.509020] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.515964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.523901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.532793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.541556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.549803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.560541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.576708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.585817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.596981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.606100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.616012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.627276] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.634187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.643522] device veth1_macvtap entered promiscuous mode [ 151.652883] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 151.662493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.673535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.683238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.693437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.703889] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.711507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.719989] device veth1_vlan entered promiscuous mode [ 151.725899] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 151.733098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.740670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.748496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.755539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.763812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.771744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.780080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.790768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.802452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.811934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.821955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.831384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.841394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.851895] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.859091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.877642] Bluetooth: hci0: command 0x0419 tx timeout [ 151.888055] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 151.895379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.907486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.915445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.934057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.953975] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.989623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 152.024638] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 152.037935] Bluetooth: hci1: command 0x0419 tx timeout [ 152.063489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.075364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.115288] device veth0_macvtap entered promiscuous mode [ 152.123507] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 152.153459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.170193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.185054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.195659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.201871] Bluetooth: hci2: command 0x0419 tx timeout [ 152.206086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.219831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.229085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.239533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.249971] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.257619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.274954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.285313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.293384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.314176] device veth1_macvtap entered promiscuous mode [ 152.330077] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 152.345819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.356715] Bluetooth: hci3: command 0x0419 tx timeout [ 152.369394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.384967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.395715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.404999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.415130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.424528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.434292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.445571] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.453642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.462556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 152.475103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 152.486850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.494064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.504107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.513672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.542605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.560526] Bluetooth: hci4: command 0x0419 tx timeout [ 152.563078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.584670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.595512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.606414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.615535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.625989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.635839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.646037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.655611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.665770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.677183] Bluetooth: hci5: command 0x0419 tx timeout [ 152.677332] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.691924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.717038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.724989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.768038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.778081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.788062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.798098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.807508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.817531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.826938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.837643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.847044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.857636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.868788] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.875661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.891273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.908537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.965394] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 152.975183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.004076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.051750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.072410] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.093547] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.182277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.189556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.208161] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.228971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.244666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.252613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.253960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.270086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.285150] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.309609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.328723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.353126] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.370814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.388296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.426892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.454779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.463014] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.473438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.492819] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.513434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:05:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xaeb7, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000001"]) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) [ 153.534465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.549256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.599796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.635902] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 21:05:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/205, 0xcd}], 0x1, 0x0, 0x0) 21:05:19 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x2000) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x10) 21:05:19 executing program 1: memfd_create(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfc98) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008aec1, &(0x7f0000000480)={"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"}) 21:05:19 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote}, 0x20) [ 153.769846] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.819349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.831948] hrtimer: interrupt took 46623 ns [ 153.860065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, 0x18}) [ 153.902004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.927868] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 21:05:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) [ 153.962121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.988415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000000280)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x9}) fcntl$lock(r3, 0x24, &(0x7f0000000000)) [ 154.038976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:05:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x2, 0x1, 0x68}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xdba3dd835d632dde}, 0x48) [ 154.128960] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 154.169946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.190791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.232157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 154.282943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.308132] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 154.342009] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 154.380164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.401195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.452549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:05:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x68, r1, 0x101, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x25, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 21:05:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xeb70000}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a005f0214f9f4070a09040011000000ff02000200020000", 0x1c) 21:05:23 executing program 4: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000)=0x6, 0x4) 21:05:23 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x2000) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x10) 21:05:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x480}]}) [ 157.551921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:23 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 21:05:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:23 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff"], 0x14f) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x23237, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) socket$inet6_icmp(0xa, 0x2, 0x3a) fallocate(r1, 0x100000003, 0x5, 0x240000) 21:05:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x523, 0x0) shutdown(r0, 0x1) [ 157.763158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.810743] sd 0:0:1:0: [sg0] tag#3914 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 157.820083] sd 0:0:1:0: [sg0] tag#3914 CDB: Test Unit Ready [ 157.825930] sd 0:0:1:0: [sg0] tag#3914 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.835065] sd 0:0:1:0: [sg0] tag#3914 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.844136] sd 0:0:1:0: [sg0] tag#3914 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.853193] sd 0:0:1:0: [sg0] tag#3914 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.862272] sd 0:0:1:0: [sg0] tag#3914 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.871305] sd 0:0:1:0: [sg0] tag#3914 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.880855] sd 0:0:1:0: [sg0] tag#3914 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.889885] sd 0:0:1:0: [sg0] tag#3914 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.899041] sd 0:0:1:0: [sg0] tag#3914 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:23 executing program 0: unshare(0x40600) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 157.908041] sd 0:0:1:0: [sg0] tag#3914 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.917052] sd 0:0:1:0: [sg0] tag#3914 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.926027] sd 0:0:1:0: [sg0] tag#3914 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.935052] sd 0:0:1:0: [sg0] tag#3914 CDB[c0]: 00 00 00 00 00 00 00 00 [ 158.001629] sd 0:0:1:0: [sg0] tag#3914 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 158.010580] sd 0:0:1:0: [sg0] tag#3914 CDB: Test Unit Ready [ 158.016659] sd 0:0:1:0: [sg0] tag#3914 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.025619] sd 0:0:1:0: [sg0] tag#3914 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.034694] sd 0:0:1:0: [sg0] tag#3914 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.043741] sd 0:0:1:0: [sg0] tag#3914 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.052744] sd 0:0:1:0: [sg0] tag#3914 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.058181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.061821] sd 0:0:1:0: [sg0] tag#3914 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.079349] sd 0:0:1:0: [sg0] tag#3914 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.088397] sd 0:0:1:0: [sg0] tag#3914 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:23 executing program 4: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)="1d", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x7ff}]) [ 158.097731] sd 0:0:1:0: [sg0] tag#3914 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.106724] sd 0:0:1:0: [sg0] tag#3914 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.115701] sd 0:0:1:0: [sg0] tag#3914 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.124713] sd 0:0:1:0: [sg0] tag#3914 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.133711] sd 0:0:1:0: [sg0] tag#3914 CDB[c0]: 00 00 00 00 00 00 00 00 21:05:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000001080)=""/4096) 21:05:24 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x2000) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x10) 21:05:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:24 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b04, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9%\x9b\xa0\x7f\x00\x00\x00\xff\x00\x00\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\b\xde\xbbg\xc18\x84,:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c,\xe8\xff^9P\xee\x8aG\xdd\x00\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\x8a\x96\xf5\xf8\xb5\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xde0\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1d\x00\x00\x00\x00\x00\x00\x00\x00\x00') 21:05:24 executing program 0: syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @broadcast}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x2}]}, 0x64}}, 0x0) 21:05:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfe, 0xfe, 0x2, [@enum={0x0, 0x3, 0x0, 0x6, 0x4, [{}, {}, {}]}, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], '#'}, @typedef, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}]}}, 0x0, 0x11a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 158.372040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1, 0x80, 0x4, 0xf}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f00000004c0)="4ad22668ce2672efa92348d2afca07109cc0fbdb3b3446082a6cf7b33df580697b4e39201f8bd0ad17ff4f06f39919af407c79eeecf3f39cf68b1db5e6764c7e405e43962d9cb9b8b0467da59be191c5f6105c5cf3edd1804e08a0c198f5bbe9909c60bd5a4f6085644a6ba72cd5a45dcb489c91d3adc3c6735ef0a251a8348b2d", 0x0, &(0x7f00000000c0), &(0x7f0000000180)="15f0c2eeeaa0a214aebbc604626e1762f49f99f9600276a0f0663368c7146abe1abb543a67c70d4a5b6d53c2510e905a24c0fca509e6a2de025e968ce522292807", 0x401, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000040), &(0x7f0000000080)=""/235, &(0x7f0000000180), &(0x7f0000000280), 0x6, r0}, 0x38) 21:05:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:24 executing program 0: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xb}) epoll_wait(r0, &(0x7f000000affb)=[{}], 0x1701, 0x0) [ 158.563583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0xffffff1f}) 21:05:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) [ 158.811464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 21:05:24 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x7, 0x88, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x8, 0x0, @wg=@data}}}}}}, 0x0) 21:05:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:24 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000002340)) 21:05:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x40000, 0x0) io_setup(0x101, &(0x7f0000000480)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) 21:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 21:05:27 executing program 0: sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="649accea", @ANYRES16, @ANYBLOB="00a1f036138a124e53250900000004000f0004000b0010006e800400014b8082e300040001000400280087ab5b1175e06b6b49f981dbd294dce75baaae9121"], 0x30}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x3, 0x6, @link_local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 21:05:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:27 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x800) read$midi(r0, &(0x7f0000000040)=""/99, 0x63) 21:05:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6}, 0x67) [ 161.483319] device lo entered promiscuous mode [ 161.501309] mmap: syz-executor.5 (8250) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 161.514147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:05:27 executing program 5: socketpair(0x22, 0x2, 0x10, &(0x7f0000000480)) 21:05:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffffa}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x43}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffa8, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 21:05:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = dup3(r9, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 161.661029] delete_channel: no stack [ 161.675640] delete_channel: no stack [ 161.690191] device lo left promiscuous mode [ 161.691332] delete_channel: no stack [ 161.711707] device lo entered promiscuous mode [ 161.719680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.724813] delete_channel: no stack 21:05:27 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "060101", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x3}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 21:05:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 161.768666] device lo left promiscuous mode 21:05:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x1}]}]}, 0xfc}}, 0x0) 21:05:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0x0, 0x0, 0x8, 0x0, 0x800}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b7", 0x18000}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x20117f68}], 0x1}}], 0x729, 0x1f4) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) 21:05:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = dup3(r9, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:27 executing program 5: unshare(0x400) r0 = openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac01, 0x0) 21:05:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000000000401) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f0000000040)) [ 161.959745] syz-executor.5 (8293) used greatest stack depth: 22888 bytes left 21:05:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x2a, 0x2, 0x0) getsockname(r3, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 21:05:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x4}]}}}]}, 0x3c}}, 0x0) 21:05:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = dup3(r9, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:28 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1a) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/29, 0x1d) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 21:05:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") tkill(0x0, 0x2f) 21:05:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x144, 0x10, 0x501, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@empty}, {@in=@empty, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x0) 21:05:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) 21:05:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:28 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 21:05:28 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) read$FUSE(r2, 0x0, 0x116) 21:05:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:28 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendfile(r2, r3, 0x0, 0xd811) 21:05:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:28 executing program 5: setitimer(0x0, &(0x7f0000000100)={{0xfffffffffffffffa}, {0x63}}, 0x0) 21:05:28 executing program 0: unshare(0x2040400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x7) connect(r2, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 21:05:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") tkill(0x0, 0x2f) 21:05:31 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac141436"], 0x20}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 21:05:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 21:05:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:31 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x15}, {0x4d}, {0x6}]}) 21:05:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(0xffffffffffffffff, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0xfe3, 0x2}, {0x0, 0x0, 0x0, 0x0, @msi}]}) [ 165.620258] audit: type=1326 audit(1601067931.360:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8406 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 21:05:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in=@remote, @in=@broadcast}, {@in=@private, 0x0, 0x6c}, @in6, {}, {}, {}, 0x2}, 0x0, 0x5}}, 0xf8}, 0x8}, 0x0) 21:05:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(0xffffffffffffffff, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 166.384275] audit: type=1326 audit(1601067932.120:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8406 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 21:05:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") tkill(0x0, 0x2f) 21:05:34 executing program 0: socket(0x40000000015, 0x5, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x200000000000011, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x5d) sendmmsg(r4, &(0x7f0000004f00)=[{{&(0x7f0000000340)=@xdp={0x2c, 0x0, r5, 0x0, 0x600}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="b2ab61cd1a82dbc522c3a58725c6", 0xe}], 0x1}}], 0x1, 0x0) 21:05:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000900000000001400030067656e652ea7a10c766531000000000000000000"], 0x50}}, 0x0) 21:05:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(0xffffffffffffffff, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x5}, {0x7c}, {0x6}]}) 21:05:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:34 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x205}}], 0x48}], 0x1, 0x0) 21:05:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r1, r4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) [ 168.789890] audit: type=1326 audit(1601067934.530:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8487 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 169.571149] audit: type=1326 audit(1601067935.310:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8487 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 21:05:37 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8000000020c, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x61, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) 21:05:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = getpid() tkill(r1, 0x2f) 21:05:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r1, r4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:37 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xfc, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) read$alg(r3, &(0x7f0000000340)=""/196, 0xc4) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) 21:05:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:37 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x2e, 0x0, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8042}, 0x44080) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0xf}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x48}}, 0x0) 21:05:37 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = getpid() tkill(r1, 0x2f) 21:05:37 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) dup2(r1, r0) 21:05:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r1, r4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:37 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)={0x100000000000000}) 21:05:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = getpid() tkill(r1, 0x2f) 21:05:37 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$tipc(r0, 0x0, &(0x7f00000002c0)) 21:05:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:37 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) dup2(r1, r0) 21:05:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[], 0x8) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) dup2(r1, r0) 21:05:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e001fffa8ce6a371eac469440f2574e2ae9cf0456"], 0x1c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x400454ca, 0x400000) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}], 0x300, 0xbc06, 0x0) 21:05:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:37 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) dup2(r1, r0) 21:05:37 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) dup2(r2, r3) dup2(r0, r1) 21:05:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0) dup2(r1, r0) 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) 21:05:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000740)={0x2c, 0x8, r2}, 0x10) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0) dup2(r1, r0) 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000000c0)) 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0) dup2(r1, r0) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 0: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = socket(0x18, 0x805, 0x1) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) 21:05:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:38 executing program 5: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f0000000140)="a6", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x1c) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) dup2(r2, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r0, 0x1000000000016) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) 21:05:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = dup2(r1, r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'netdevsim0\x00', @ifru_flags}) [ 173.136819] audit: type=1400 audit(1601067938.880:13): avc: denied { block_suspend } for pid=8723 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 21:05:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0xc020662a, &(0x7f0000000200)={0x0, 0x0, 0x2}) 21:05:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:39 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = dup2(r1, r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xa4}, {0x2c}, {0x6}]}) 21:05:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:39 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004807a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltfilter={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3, 0x8}}}, 0x24}, 0x8}, 0x0) 21:05:39 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(r0, 0xffffffffffffffff) [ 173.426361] audit: type=1326 audit(1601067939.150:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8753 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 173.440040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:05:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = dup2(r1, r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:39 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(r0, 0xffffffffffffffff) [ 173.545915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:05:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000240)=@in={0x2, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:39 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(r0, 0xffffffffffffffff) 21:05:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 173.751683] kvm: pic: single mode not supported [ 173.751741] kvm: pic: level sensitive irq not supported 21:05:39 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) write$eventfd(r1, &(0x7f0000000240), 0xfffffd8b) 21:05:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:39 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0xff, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 173.771343] kvm: pic: level sensitive irq not supported [ 174.164150] audit: type=1326 audit(1601067939.900:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8753 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 21:05:40 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r0 = getpid() tkill(r0, 0x2f) 21:05:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:40 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, 0x0}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x5000000, 0x0) 21:05:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r0 = getpid() tkill(r0, 0x2f) 21:05:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:40 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:40 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0xa) 21:05:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r0 = getpid() tkill(r0, 0x2f) 21:05:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:40 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x17a, &(0x7f00000002c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 21:05:40 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'team_slave_1\x00', &(0x7f0000001000)=@ethtool_flash={0x24, 0x0, ',\x11\xbcL\x87_\xd8\xbcd\xbb\t&7*B\f%\x11\xcbt\x99\x02.g\x7fX\xe1\"\xe3F\x7f\x99\xc4}`]\x8bK\xb3L\x06*-\x99\x17\xb4\xc9\bk\xe8\xddL\xdcXg\xfb[\xbbm\xa5\xb82,\x06\x93E}\xeanz\x9eH\xf5&?/u\xa6\xc8\x83\x8d\xe3&_\r\xdd\xd6j\xf2n)(\xf3\xc6\xce\x8e\x82\xcd\xacX\xfdEG\xf8\xae31\x8aK\x83\xf5\x96\'\xbd\xb4\x89\x12=\xf4\xda\xc2\x02\x03#\xf6\x9a\xc6a'}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket(0x10, 0x80002, 0x0) 21:05:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:41 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000900)="ba", 0x20000901, 0x0, 0x0, 0x0) 21:05:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/108, 0x6c}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x9, 0x2, 0x200, 0xdade, 0x8001, 0x4, 0x7, r4}, &(0x7f00000001c0)=0x20) 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x2, 0x2}) 21:05:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:41 executing program 5: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:05:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="2e00000052008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:41 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 175.615494] ptrace attach of "/root/syz-executor.2"[8971] was attempted by "/root/syz-executor.2"[8975] 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 21:05:41 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7e3c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') 21:05:41 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 175.722034] ptrace attach of "/root/syz-executor.2"[8985] was attempted by "/root/syz-executor.2"[8988] 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 175.835026] ptrace attach of "/root/syz-executor.2"[9004] was attempted by "/root/syz-executor.2"[9005] 21:05:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x12, r1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x25}, {0x35}, {0x6}]}) 21:05:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@multicast2}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) [ 176.064560] audit: type=1326 audit(1601067941.801:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9023 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 21:05:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x0, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) unshare(0x2000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0x4008ae06, 0x0) 21:05:42 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x0, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x2) 21:05:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:42 executing program 5: r0 = getpgid(0x0) r1 = socket$packet(0x11, 0x2, 0x300) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r0}) 21:05:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:42 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x0, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 176.808055] audit: type=1326 audit(1601067942.551:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9023 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 21:05:42 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x3) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x5b8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 21:05:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57941c194c34c9e3"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:42 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57941c194c34c9e3"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:42 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:43 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x20c41, 0x0) write(r0, &(0x7f0000000280)="107a7d3e13dc90", 0x7) 21:05:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:43 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57941c194c34c9e3"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 21:05:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:43 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d800000018008105e00f80ecdb4cb904021d650400027c05e8fe55a10a000600ac14142603000e1208001e000000812f0900040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 21:05:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57941c194c34c9e3"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:43 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 177.661452] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 177.689584] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:43 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="7261770000000000ffffff6a000000000000000000000000000000000000000008b46e89bac13f2b0dcc"], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:05:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57941c194c34c9e3"}) 21:05:43 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) [ 177.907873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:05:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x2) 21:05:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000500)}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57941c194c34c9e3"}) 21:05:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x0, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000180)=0xb0) 21:05:44 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:44 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000500)}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:44 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:44 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000500)}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:44 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:44 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:44 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57941c194c34c9e3"}) 21:05:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:45 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:45 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:45 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000013003510800000010000000007000010", @ANYRES32=r3, @ANYBLOB="00000005000000000c001a00080002000300fa"], 0x2c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x3, 0x0) 21:05:45 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000013003510800000010000000007000010", @ANYRES32=r3, @ANYBLOB="00000005000000000c001a00080002000300fa"], 0x2c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x3, 0x0) 21:05:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x85, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:45 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:45 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @random="74ed278877c5", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 21:05:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc7, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea23"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=0x0, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0xa0004000, 0xa0004000}}) 21:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc7, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea23"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=0x0, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:46 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x7ffff000}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="be", 0x1}], 0x1}, 0x60) 21:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc7, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea23"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=0x0, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe8, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf48"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x82, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) 21:05:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0x0, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe8, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf48"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:46 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}]}}]}, 0x148}}, 0x0) 21:05:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0x0, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe8, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf48"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1}, @TCF_EM_NBYTE={0x14, 0x2}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb2}}]}]}}]}, 0x88}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf9, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:47 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0x0, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) [ 181.277798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 21:05:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf9, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:47 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 181.377044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r11 = socket$inet(0x2, 0x2, 0x0) bind(r11, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 21:05:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf9, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 21:05:47 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 181.626534] ================================================================================ [ 181.635360] UBSAN: Undefined behaviour in ./include/net/red.h:272:18 [ 181.641853] shift exponent 71 is too large for 64-bit type 'long unsigned int' [ 181.649216] CPU: 1 PID: 9492 Comm: syz-executor.5 Not tainted 4.19.147-syzkaller #0 [ 181.657007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.666362] Call Trace: [ 181.668944] [ 181.671099] dump_stack+0x22c/0x33e [ 181.674732] ubsan_epilogue+0xe/0x3a [ 181.678445] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 181.684583] ? mark_held_locks+0xa6/0xf0 [ 181.688645] ? kvm_clock_get_cycles+0x14/0x30 [ 181.693140] ? ktime_get+0x21b/0x320 [ 181.696878] red_adaptative_timer+0x7ed/0x870 [ 181.701460] call_timer_fn+0x177/0x760 [ 181.705339] ? hfsc_dump_class.cold+0x41/0x41 [ 181.709831] ? init_timer_key+0x370/0x370 [ 181.713992] ? mark_held_locks+0xa6/0xf0 [ 181.718052] ? _raw_spin_unlock_irq+0x24/0x90 [ 181.722545] ? hfsc_dump_class.cold+0x41/0x41 [ 181.727035] expire_timers+0x243/0x500 [ 181.730921] run_timer_softirq+0x259/0x730 [ 181.735153] ? expire_timers+0x500/0x500 [ 181.739208] ? kvm_sched_clock_read+0x14/0x40 [ 181.743706] __do_softirq+0x27d/0xad2 [ 181.747515] irq_exit+0x22d/0x270 [ 181.751051] smp_apic_timer_interrupt+0x15f/0x5d0 [ 181.755894] apic_timer_interrupt+0xf/0x20 [ 181.760123] [ 181.762359] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0xa/0x20 [ 181.768499] Code: 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 ce fe ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 48 89 f2 48 89 fe 07 00 00 00 e9 ac fe ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 [ 181.787395] RSP: 0018:ffff8880448a7758 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 181.795094] RAX: dead000000000100 RBX: 0000000000000000 RCX: ffffffff819d89f2 [ 181.802354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.809616] RBP: ffffea000148cbc0 R08: 0000000000000000 R09: ffffffffffffffff [ 181.816883] R10: 0000000000000007 R11: 0000000000000001 R12: ffffea000148cbc0 [ 181.824142] R13: 00007efc516db000 R14: dffffc0000000000 R15: ffffea000148cbc8 [ 181.831438] ? unmap_page_range+0x1262/0x2ec0 [ 181.835940] unmap_page_range+0x1262/0x2ec0 [ 181.840277] ? kmem_cache_free+0x7f/0x2b0 [ 181.844416] ? vm_normal_page_pmd+0x4d0/0x4d0 [ 181.848920] ? do_group_exit+0x125/0x320 [ 181.852977] ? exit_to_usermode_loop+0x204/0x2c0 [ 181.857726] ? do_syscall_64+0x57c/0x670 [ 181.861784] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.867139] ? uprobe_munmap+0x2d/0x360 [ 181.871112] unmap_single_vma+0x198/0x300 [ 181.875258] unmap_vmas+0xa9/0x180 [ 181.878798] exit_mmap+0x2b9/0x530 [ 181.882354] ? __ia32_sys_munmap+0x80/0x80 [ 181.886599] ? __khugepaged_exit+0x2cc/0x420 [ 181.891004] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 181.896016] ? kmem_cache_free+0x284/0x2b0 [ 181.900260] ? __khugepaged_exit+0x2ed/0x420 [ 181.904670] mmput+0x14e/0x4a0 [ 181.907862] do_exit+0xb12/0x2d80 [ 181.911329] ? futex_wake+0x159/0x480 [ 181.915128] ? mm_update_next_owner+0x660/0x660 [ 181.919803] ? get_signal+0x389/0x2270 [ 181.923693] ? lock_downgrade+0x750/0x750 [ 181.927845] do_group_exit+0x125/0x320 [ 181.931747] get_signal+0x3f3/0x2270 [ 181.935455] ? find_held_lock+0x2d/0x110 [ 181.939513] ? mark_held_locks+0xf0/0xf0 [ 181.943576] do_signal+0x8f/0x1690 [ 181.947110] ? lock_downgrade+0x750/0x750 [ 181.951249] ? lock_acquire+0x170/0x3f0 [ 181.955218] ? __might_fault+0xef/0x1d0 [ 181.959186] ? setup_sigcontext+0x820/0x820 [ 181.963503] ? __might_fault+0x192/0x1d0 [ 181.967563] ? _copy_to_user+0xb8/0x100 [ 181.971543] ? __se_sys_futex+0x2af/0x3d0 [ 181.975683] ? __se_sys_futex+0x2b8/0x3d0 [ 181.979831] ? do_futex+0x1c60/0x1c60 [ 181.983628] ? __se_sys_clock_gettime+0x15a/0x250 [ 181.988466] ? exit_to_usermode_loop+0x36/0x2c0 [ 181.993135] exit_to_usermode_loop+0x204/0x2c0 [ 181.997717] do_syscall_64+0x57c/0x670 [ 182.001606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.006805] RIP: 0033:0x45e179 [ 182.009992] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 182.028910] RSP: 002b:00007efc50566cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.036967] RAX: fffffffffffffe00 RBX: 000000000118cff0 RCX: 000000000045e179 [ 182.044231] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000118cff0 [ 182.051495] RBP: 000000000118cfe8 R08: 0000000000000000 R09: 0000000000000000 [ 182.058759] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cff4 [ 182.066029] R13: 00007ffdfea2eb7f R14: 00007efc505679c0 R15: 000000000118cff4 21:05:47 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) [ 182.073307] ================================================================================ 21:05:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x101, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 21:05:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/6, 0x6}}], 0x1, 0x40010002, 0x0) 21:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x101, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in=@loopback}, {@in=@dev, 0x0, 0x33}, @in6=@ipv4={[], [], @broadcast}, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x40, 0x17, {0x40, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x184}}, 0x0) [ 182.331174] ================================================================================ [ 182.339911] UBSAN: Undefined behaviour in drivers/vhost/vhost.c:116:62 [ 182.346581] load of value 8 is not a valid value for type '_Bool' [ 182.352822] CPU: 1 PID: 9516 Comm: syz-executor.1 Not tainted 4.19.147-syzkaller #0 [ 182.360612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.369960] Call Trace: [ 182.372577] dump_stack+0x22c/0x33e [ 182.376215] ubsan_epilogue+0xe/0x3a [ 182.379934] __ubsan_handle_load_invalid_value.cold+0x63/0x6f [ 182.385823] ? __lockdep_init_map+0x100/0x5c0 [ 182.390322] vhost_vq_reset.constprop.0.cold+0x15/0x1a [ 182.395617] vhost_dev_init+0x442/0x780 [ 182.399596] vhost_net_open+0x54c/0x730 [ 182.403564] ? vhost_zerocopy_signal_used+0x3d0/0x3d0 [ 182.408753] misc_open+0x372/0x4a0 [ 182.412291] ? misc_devnode+0x120/0x120 [ 182.416260] chrdev_open+0x266/0x770 [ 182.419971] ? lockref_get+0x11/0x50 [ 182.423678] ? __register_chrdev+0x400/0x400 [ 182.428095] do_dentry_open+0x4aa/0x1160 [ 182.432157] ? __register_chrdev+0x400/0x400 [ 182.436588] ? security_inode_permission+0xc5/0xf0 [ 182.441533] ? chmod_common+0x3f0/0x3f0 [ 182.445535] ? inode_permission+0x10c/0x540 [ 182.449850] ? unlazy_walk+0x1f6/0x520 [ 182.453759] path_openat+0x7d5/0x2e90 [ 182.457573] ? path_lookupat+0x8d0/0x8d0 [ 182.461638] ? mark_held_locks+0xf0/0xf0 [ 182.465699] ? find_held_lock+0x2d/0x110 [ 182.469761] do_filp_open+0x18c/0x3f0 [ 182.473559] ? may_open_dev+0xf0/0xf0 [ 182.477364] ? lock_downgrade+0x750/0x750 [ 182.481524] ? lock_acquire+0x170/0x3f0 [ 182.485504] ? do_raw_spin_unlock+0x171/0x240 [ 182.490000] ? _raw_spin_unlock+0x29/0x40 [ 182.494146] ? __alloc_fd+0x2ab/0x590 [ 182.497986] do_sys_open+0x3b3/0x520 [ 182.501700] ? filp_open+0x70/0x70 [ 182.505241] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 182.509993] ? trace_hardirqs_off_caller+0x69/0x210 [ 182.515021] ? do_syscall_64+0x21/0x670 [ 182.518996] do_syscall_64+0xf9/0x670 [ 182.522800] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.527984] RIP: 0033:0x45e179 [ 182.531174] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 182.550069] RSP: 002b:00007f09f0ec0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.557774] RAX: ffffffffffffffda RBX: 0000000000024a80 RCX: 000000000045e179 [ 182.565033] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 182.572296] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 21:05:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) [ 182.579565] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 182.586833] R13: 00007ffc3447349f R14: 00007f09f0ec19c0 R15: 000000000118cf4c [ 182.594109] ================================================================================ 21:05:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff9c, 0xd}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x46) 21:05:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x101, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, r0) 21:05:48 executing program 5: mknod$loop(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=@random={'security.', 'security.SMACK64TRANSMUTE\x00'}, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', 0x1a, 0x0) 21:05:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x105, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c21630200"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x105, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) dup2(r1, r0) 21:05:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x3012, 0x1}}) 21:05:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) dup2(r1, r0) 21:05:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x105, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c21630200"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:48 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 21:05:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) dup2(r1, r0) 21:05:49 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r4, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 21:05:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x107, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0) dup2(r1, r0) 21:05:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x107, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0) dup2(r1, r0) 21:05:49 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 21:05:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:49 executing program 5: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000002340)='enc=', 0x0) 21:05:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x107, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c216302000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept(r2, &(0x7f0000000380), &(0x7f0000000080)=0x80) dup2(r1, r2) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$unix(0x1, 0x2000000000001, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21:05:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0) dup2(r1, r0) 21:05:49 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 21:05:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x108, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:49 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 21:05:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x108, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c21630200000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:49 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 21:05:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) [ 183.981665] ================================================================================ [ 183.990448] UBSAN: Undefined behaviour in ./include/linux/log2.h:71:13 [ 183.997125] shift exponent 4294967295 is too large for 64-bit type 'long unsigned int' [ 184.005191] CPU: 0 PID: 9682 Comm: syz-executor.5 Not tainted 4.19.147-syzkaller #0 [ 184.012986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.022338] Call Trace: [ 184.024938] dump_stack+0x22c/0x33e [ 184.028579] ubsan_epilogue+0xe/0x3a [ 184.032301] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 184.038483] ? ti1250_zoom_video+0xe9/0x340 [ 184.042814] ? rate_transfer+0x2b0/0x2b0 [ 184.046880] ? plug_client_size+0x1ca/0x3e0 [ 184.051274] snd_pcm_oss_change_params_locked.cold+0x115/0x11a [ 184.057293] ? snd_pcm_oss_open+0x50/0x50 [ 184.061545] ? snd_pcm_oss_get_active_substream+0x142/0x1c0 [ 184.067267] ? ww_mutex_unlock+0x2f0/0x2f0 [ 184.071522] ? __lock_acquire+0x6ec/0x3ff0 [ 184.075783] snd_pcm_oss_get_active_substream+0x164/0x1c0 [ 184.081331] snd_pcm_oss_ioctl+0x1ecd/0x33c0 [ 184.085746] ? mark_held_locks+0xf0/0xf0 [ 184.089813] ? find_held_lock+0x2d/0x110 [ 184.093880] ? snd_pcm_oss_release+0x300/0x300 [ 184.098473] ? mark_held_locks+0xf0/0xf0 [ 184.102554] ? snd_pcm_oss_release+0x300/0x300 [ 184.107152] do_vfs_ioctl+0xcdb/0x12e0 [ 184.111051] ? selinux_file_ioctl+0x44f/0x5e0 [ 184.115553] ? ioctl_preallocate+0x200/0x200 [ 184.119970] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 184.125430] ? __fget+0x3ad/0x570 [ 184.128894] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 184.133135] ? ktime_get_ts64+0x2d3/0x420 [ 184.137385] ksys_ioctl+0x9b/0xc0 [ 184.140846] __x64_sys_ioctl+0x6f/0xb0 [ 184.144740] do_syscall_64+0xf9/0x670 [ 184.148576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.153774] RIP: 0033:0x45e179 [ 184.156970] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:05:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x108, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) [ 184.175895] RSP: 002b:00007efc50587c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.183612] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045e179 [ 184.190908] RDX: 0000000000000000 RSI: 0000000080045006 RDI: 0000000000000003 [ 184.198179] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 184.205451] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 184.212718] R13: 00007ffdfea2eb7f R14: 00007efc505889c0 R15: 000000000118cf4c [ 184.220003] ================================================================================ 21:05:50 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00}) r1 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:05:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:50 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, 0xffffffffffffffff) [ 184.449229] ================================================================================ [ 184.457835] UBSAN: Undefined behaviour in ./include/linux/log2.h:61:13 [ 184.464504] shift exponent 64 is too large for 64-bit type 'long unsigned int' [ 184.471870] CPU: 0 PID: 9682 Comm: syz-executor.5 Not tainted 4.19.147-syzkaller #0 [ 184.479666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.489018] Call Trace: [ 184.491616] dump_stack+0x22c/0x33e [ 184.495257] ubsan_epilogue+0xe/0x3a [ 184.498980] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 184.505132] ? rate_src_frames+0x21f/0x2a0 [ 184.509377] ? rate_transfer+0x2b0/0x2b0 [ 184.513445] ? plug_client_size+0x1ca/0x3e0 [ 184.517780] snd_pcm_oss_change_params_locked.cold+0x6d/0x11a [ 184.523685] ? snd_pcm_oss_open+0x50/0x50 [ 184.527837] ? snd_pcm_oss_get_active_substream+0x142/0x1c0 [ 184.533553] ? ww_mutex_unlock+0x2f0/0x2f0 [ 184.537808] ? __lock_acquire+0x6ec/0x3ff0 [ 184.542059] snd_pcm_oss_get_active_substream+0x164/0x1c0 [ 184.547607] snd_pcm_oss_ioctl+0x1ecd/0x33c0 [ 184.552023] ? mark_held_locks+0xf0/0xf0 [ 184.556094] ? find_held_lock+0x2d/0x110 [ 184.560162] ? snd_pcm_oss_release+0x300/0x300 [ 184.564754] ? mark_held_locks+0xf0/0xf0 [ 184.568833] ? snd_pcm_oss_release+0x300/0x300 [ 184.573427] do_vfs_ioctl+0xcdb/0x12e0 [ 184.577323] ? selinux_file_ioctl+0x44f/0x5e0 [ 184.581818] ? ioctl_preallocate+0x200/0x200 [ 184.586233] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 184.591693] ? __fget+0x3ad/0x570 [ 184.595160] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 184.599400] ? ktime_get_ts64+0x2d3/0x420 [ 184.603565] ksys_ioctl+0x9b/0xc0 [ 184.607030] __x64_sys_ioctl+0x6f/0xb0 [ 184.610930] do_syscall_64+0xf9/0x670 [ 184.614743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.619941] RIP: 0033:0x45e179 [ 184.623135] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.642037] RSP: 002b:00007efc50587c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.649755] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045e179 [ 184.657028] RDX: 0000000000000000 RSI: 0000000080045006 RDI: 0000000000000003 [ 184.664296] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 184.671567] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 184.678847] R13: 00007ffdfea2eb7f R14: 00007efc505889c0 R15: 000000000118cf4c [ 184.686157] ================================================================================ 21:05:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="11380000", @ANYRES16, @ANYBLOB="000200000000fff447d613275e542020990001"], 0x28}}, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f4070009040002000710080001", 0x17) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 21:05:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:50 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, 0xffffffffffffffff) 21:05:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 184.850322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:50 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00, 0x0, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x1c\xfc\xef`\x14\xab%selg&\x0e\x00ZJxn\x00\xb5t\x7f\xf8t\x93g%\x96\xacXi\x8ei\xad\xa1\xbf\x13\xb4\xeaGMX\x94\xdd} \x82_8\x01LG5\xa6\x86\xa0\xd7\xd8\x1c`\xe4lj\xe1\x11\x1e\x91Y\x99~T\x00\x00\x00\x00\x00\x00Bt\x8a\xf0\x176\x1e>\xafG\x1b\xcb\x87d\xe4r\x1f\xca\xfcR\xbdh\x14n\xc1\xcb\x8d \xb7S\xe3\\\xe5\xfa\xca?\xe8\x95\xcb\r\xa5B\xc8\x11\xe7\x96\x18:\f\x96\x02\x88e\xceq\xb7\x00I|\tz\x04F\xfb!\xbb\x8e\xac\x81x\xfeW\xdd\x1f\xe9\xf1\xd4?\xab\xecA\xb3@\xfa\xb7^18\x14\xa4.\xaa\'\xb2r\x89\x83\xd0\xbe\xf2a\xdbL\x1e\xf0Jif\xbbZ\x12\xb2\x84\r\xe3\xf7n\xb7\r0\x04\x9c\xaa\x8a\x10\x97\b\xde=\xf7\xd6\xc6p\xc1\xcb\xd9u\x06*L\xe5\xf5\x02\x1f.\xe0\xb3\xf2`m\xfa\xa3\xfdb\x02%g\x93\xd94\xa9\xa4%\x0e\xae\x8fs\x06\t8\xaf\xa8\x99\xc4\x88\x9a:\xebk\tY\x9e\x99mZ\x10\x93\x86\xb3\x1aU\"=\xe6f\xadkFF\xe7\x16\xa8\x1cQ\x81\xe8y\r\x11?W\b\x85\xbd&\x9f\xf9H\xe81v{/C\xd2+O\xf5\xa3HQI)\xb7L\x14\xab\x10\x90\x0f\xc97\x15-\x14\xf4\xd2\xe6\xaep\xdc\xf7\xb3\xe9\x06\xc5^\"1^\x10\x13\x1e\x0fcFI\x9e%\xa6\'T.\xe9\xd0\xe7\xa7\x9f\x17vG\xd3\x82\x89\x16\x0e\x9e7\xde\xff>\xda+MG\x0eK\x16\xefR\x84xg)?\x8a2\v\xdea\xc6\x83\xad)+C\xc4[\xdf\x8b&\x15\xa1\x8bL\xa5Q\xfa\xb5\x9d~\x7fJ\x1e0\xbeb\x88\xd5\x1b\xfa\x16UP\xf0\xf1f\xbc\xa9\xaa\xd5\xd3K\xeb\xf5\x86\x9c\xdeh\x91\x86H\xdb', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) dup2(r1, 0xffffffffffffffff) 21:05:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) listen(r2, 0x0) 21:05:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:51 executing program 4: r0 = socket(0x40000000015, 0x40000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 21:05:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x5, 0x7]}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:51 executing program 4: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, &(0x7f0000000000)="2e1dea298000d9", 0xfdfe, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0800e0}, 0x1d) [ 185.642183] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 185.720056] *** Guest State *** [ 185.734089] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 21:05:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 185.769569] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 185.791801] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.812126] CR3 = 0x0000000000000000 21:05:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) [ 185.825890] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 185.827251] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 185.846159] RFLAGS=0x00000002 DR7 = 0x0000000000000400 21:05:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 185.880179] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 21:05:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 185.920968] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 185.954896] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 185.967749] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 185.981477] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 21:05:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 186.014798] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 186.075049] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 186.111910] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 186.132295] GDTR: limit=0x00000000, base=0x0000000000000000 [ 186.148760] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 186.161168] IDTR: limit=0x00000000, base=0x0000000000000000 [ 186.181831] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 186.199693] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 186.211172] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 186.219575] Interruptibility = 00000000 ActivityState = 00000000 [ 186.233197] *** Host State *** [ 186.238353] RIP = 0xffffffff811ca0ca RSP = 0xffff888043bbf878 [ 186.244924] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 186.257021] FSBase=00007efc50588700 GSBase=ffff8880ae200000 TRBase=fffffe0000003000 [ 186.264964] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 186.273038] CR0=0000000080050033 CR3=00000000a4a47000 CR4=00000000001426f0 [ 186.281092] Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff87c013e0 [ 186.295038] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 186.301850] *** Control State *** [ 186.305444] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000e2 [ 186.313821] EntryControls=0000d1ff ExitControls=002fefff [ 186.320016] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 186.327730] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 186.334519] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 186.342844] reason=80000021 qualification=0000000000000000 [ 186.350031] IDTVectoring: info=00000000 errcode=00000000 [ 186.355597] TSC Offset = 0xffffff9a6a46760a [ 186.368705] TPR Threshold = 0x00 [ 186.377138] EPT pointer = 0x000000008814a01e [ 186.394752] Virtual processor ID = 0x0002 21:05:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(0xffffffffffffffff, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) readahead(0xffffffffffffffff, 0x0, 0x0) 21:05:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 186.542015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(0xffffffffffffffff, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x15, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 21:05:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) [ 186.751233] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(0xffffffffffffffff, r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:52 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f909, 0x0, [], @p_u16=0x0}}) 21:05:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, 0x0, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 186.932639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:52 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = dup2(r0, r1) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000000c0)=""/242) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = dup2(r3, r4) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f00000000c0)=""/242) 21:05:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) close(r0) 21:05:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 187.061762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, 0x0, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:52 executing program 4: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="f1", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r0}, 0x0, 0x0, 0x0) 21:05:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) close(r0) 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 187.221344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:53 executing program 4: unshare(0x24020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x33) 21:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, 0x0, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) close(r0) 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 187.386580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="0a4ff61e35428ccd474231305efb2a3064856ad9056d9ac6bc0bcd980ce99f039c00761ab371a71d9e5ed44f80006291eb454d6d720d74b812c2e05f668f8fd92b04602292c3e4f50e3b0b4bbb0daaff7cc809d03492133a77bf49f2497cb8410f316291518ddc3329acf406b7a8596f5adb89c4e8c024f3557b03f683b3e28eee6c20cf8a3a00e80b7f946df70ffef192eb0b8e9dedef706a02b1f2bac8378311eeb109306c279ac1bff9d74c7efd17fa003d166861a073e1881831d9580a7b66077aad5eff6b05"}) 21:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0x14, &(0x7f0000651000)=""/240, &(0x7f0000000100)=0x483) [ 187.592334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb", 0x34}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:53 executing program 4: r0 = socket$packet(0x11, 0x20000000000003, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@x25={0x9, @remote={[], 0x0}}, 0x80) 21:05:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 187.805106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb", 0x34}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:53 executing program 4: syz_emit_ethernet(0x22c, &(0x7f0000000040)=ANY=[], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 21:05:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb", 0x34}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) [ 187.999728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r1, r4) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) [ 188.167875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:54 executing program 4: set_mempolicy(0x1, &(0x7f0000000040)=0xc0ec, 0x5) 21:05:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @window, @sack_perm], 0x400) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:54 executing program 4: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) io_submit(r0, 0x2, &(0x7f0000003880)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x1000000e0, 0x7ffffffffffffffd}]) 21:05:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:54 executing program 4: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) io_submit(r0, 0x2, &(0x7f0000003880)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x1000000e0, 0x7ffffffffffffffd}]) 21:05:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:55 executing program 4: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) io_submit(r0, 0x2, &(0x7f0000003880)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x1000000e0, 0x7ffffffffffffffd}]) 21:05:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:55 executing program 4: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) io_submit(r0, 0x2, &(0x7f0000003880)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x1000000e0, 0x7ffffffffffffffd}]) 21:05:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:55 executing program 4: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x2, &(0x7f0000003880)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000e0, 0x7ffffffffffffffd}]) 21:05:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:55 executing program 4: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x2, &(0x7f0000003880)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000e0, 0x7ffffffffffffffd}]) 21:05:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36eb00000000fc660000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 21:05:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xe88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 21:05:56 executing program 4: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x2, &(0x7f0000003880)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000e0, 0x7ffffffffffffffd}]) 21:05:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="f71dae55a78bf98f81657d9e9de5dc490702c0833dda2cd6a29b1003d43d1fb13393091d01983d77cbaf9686") r1 = getpid() tkill(r1, 0x2f) 21:05:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r1, r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:05:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 21:05:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf488cf16efa3b66de441adb44a1f45234af0e7317f1ec9f9a795c2163020000000000"}}], 0x1c) wait4(0x0, 0x0