ffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000580)=0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r6 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x7, 0x3, 0x0, 0x62, 0x1cd4, 0x1000, 0x10}}) 08:04:39 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:40 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x148, r2, 0x201, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @empty, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x220}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x148}}, 0x24040010) 08:04:40 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:40 executing program 2 (fault-call:4 fault-nth:0): r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:40 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:40 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x148, r2, 0x201, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @empty, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x220}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x148}}, 0x24040010) 08:04:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = dup(r0) ioctl$KDSKBLED(r1, 0x4b65, 0xafd) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x13c, 0x4, 0x7, 0x300, 0x200, 0x25dfdbfb, {0x2, 0x0, 0x5}, [@typed={0x8, 0x3a, @fd=r1}, @generic="e8ca63544178aab9abf39f3f18ea979debce1466d6969bfb01621b9ddce789bb425e2416574c2496bf234d5540de1d905e5e30", @nested={0xec, 0x4, [@generic="031425e38b8f51eb558d729d5afe162fa5908661eb7a20648ac02a42d36edcad3544b68ef09aa36df9a8000e7127d9765235fcd439b9ef742341307555c3071eecd0e29d7dfa79beabbb916cd318d98d5dcacf4392febd1eaa7ebc74ab0740ec2e06c08deaf4c9b0a204dcedffa87a279f431d80821a55cf67756cff8c54695a574a62372f7c35b6ec6adf985d31b32b4024e83274249a4d21b3f7a6630bf12a345cc8dad2c99c752392410bb87fe8e52587ab1b7f30f4e90fe5fe4fb52cdc9fb73836bb0ebfaa50ea1557146f795c4c2f1a07f56ec5b6b74197440a2cbd33bb40eca0f6a28ff5"]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCNXCL(r2, 0x540d) 08:04:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 08:04:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:40 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:40 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x148, r2, 0x201, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @empty, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x220}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x148}}, 0x24040010) 08:04:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:40 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x20000932}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:40 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:40 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x2}}, 0x18) close(r0) 08:04:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 08:04:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:40 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x7ffff000}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r2, 0x220, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x1, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) 08:04:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) 08:04:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:41 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x2, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) 08:04:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x12000000) 08:04:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xcbf0, 0x200182) 08:04:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:41 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x8, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) close(r0) 08:04:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x13000000) 08:04:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:41 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KDSETMODE(r0, 0x4b3a, 0x1ff) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000000)={0x2, 0x3, 0x8}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000040)=0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 08:04:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:42 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x300, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', r2}) 08:04:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x14000000) 08:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:42 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0xb}, 0x0) 08:04:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) userfaultfd(0x800) close(r0) 08:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:42 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x14}, 0x0) 08:04:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) 08:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:42 executing program 5: pipe2$9p(&(0x7f0000000000), 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:43 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000080)={0xffffffffffffff01, 0x0, 0x10002, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40086439, &(0x7f00000000c0)={0x9, r1}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40047705, &(0x7f0000000140)={0x1, 0x4000000cf3e}) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) 08:04:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x5, r1}) 08:04:43 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:43 executing program 2: r0 = socket(0xd, 0x800, 0xfffffffffffffff9) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000140)=':\'\x00', &(0x7f0000000180)='/dev/snapshot\x00', &(0x7f00000001c0)='port1\x00', &(0x7f0000000200)='\x84\x00', &(0x7f0000000240)='port1\x00', &(0x7f0000000280)='port1\x00', &(0x7f00000002c0)='/dev/snapshot\x00', &(0x7f0000000300)='cpuset.\x00', &(0x7f0000000340)='posix_acl_accessuserppp1vboxnet0userself\x00', &(0x7f0000000380)=':-\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='@^cpuset\x00', &(0x7f0000000440)='\x00'], 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a45323, &(0x7f0000000040)={{0x7fff, 0x7ff}, 'port1\x00', 0x20, 0x60, 0x2, 0x5, 0x6, 0x5, 0x3, 0x0, 0x2, 0x9}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffd, 0x95, 0x1, @scatter={0x3, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/9, 0x9}]}, &(0x7f0000000640)="597e4bdf545f482cfed70154a40d72469157958a0ed38342af7386887e1e8e109ef777d0a1454d9565f9271b652873711a6bb84fe33030157ce5f5ea9002c8196cea06bd09422a054eccf6d1d495cc70c57e3c00b714d4502f9097652a312006a7ea9b544ebee267e9dbce75019eb5f1fbf092c0c2248f6d4e55212ac68596761da14221cc967f98cfa1eda9a94a51199ac0f0a802", &(0x7f0000000700)=""/150, 0x2, 0x20, 0xffffffffffffffff, &(0x7f00000007c0)}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 08:04:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) 08:04:43 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x1, 0xcffd, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 08:04:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) 08:04:43 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) getsockname(r0, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) getitimer(0x0, &(0x7f00000008c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0040000100001002abd7000fddbdf25ac1e0101000000000000000000000000fe8000000000000000000000000000aa4e2400014e2207ff0a00200084000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x4f0}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000940), 0x4) 08:04:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:43 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) 08:04:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:44 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x7800120a, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xbfb, 0x40500) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000040)={{0x2, @name="c67213a04b7cd7c70556fb72929e13cc2943508e3c61eb4c12de13099ab00910"}, 0x8, 0x8, 0x7}) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 08:04:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) 08:04:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="700000000700000009000000c5a956878be28b896170eb9921172743dae05e13bc98e993be3b73d59667a7ed7cdbd85818544e25dfd027380e87057a2ef26661bea72e02cbf829bde67821ece1e41ff73738957f49b6f8c148543a799f9fba85c9779e4062307491a49e53f219972d958e64856b9c99490fd2130184"]) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x2}) 08:04:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000bf) 08:04:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:44 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x8000) statx(r1, &(0x7f0000000040)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000bf) 08:04:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x19000000) 08:04:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000bf) 08:04:44 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="a8f2fd69100003000000000000000000200000009d000000f650ba37fcc7e74f8d713e9fe763480161e4db7f5e1f6a5d4b7f4d4b04216219f49741d1f75e1dfa995fd772d3734d4c660807b1e06aff2634d1a1237e869717d3c6220363a45e18b051ca8f8f548955013b4aebbf9746e7c4c6841c195da423bc163889c892291e69785d7aee9d79f02dcf3bae5fa973d80f672b35ae085e5fb5774b9535e10bf7a4689a2821a0b37e39ef753acb78436b585625b2a99259c550765e52d4162e55bf6f88c668b363b20bd3f37198c271a6ff424c96f22166ddd454f01e02bdfd2d1722870c88caf64e644b2de653681bcc447a6b"]) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x25c14870, 0x20000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) close(r0) r2 = getpid() fcntl$lock(r0, 0x27, &(0x7f0000000100)={0x2, 0x7, 0xffffffffffffff80, 0x1, r2}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0245629, &(0x7f00000000c0)={0x0, 0x80000001, 0x7fff, [], &(0x7f0000000080)=0x5}) 08:04:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf) 08:04:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1a000000) 08:04:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000200)) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x1}}, 0x5, 0xfac4, 0x7fff, 0x1, 0xc}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x30, 0x6, 0x400}, &(0x7f0000000380)=0x18) ptrace(0x10, r1) ptrace$setregset(0x4207, r1, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x2}, 0x18) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl$int_in(r4, 0x0, &(0x7f0000000180)=0x63a) ioctl(r5, 0x8936, &(0x7f0000000000)) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040)=@int=0xfffffffffffffff7, 0x4) 08:04:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf) 08:04:45 executing program 2: r0 = socket(0xe, 0x802, 0x4) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x200) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x100000000, 0x8, 0x2}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000040)) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf) 08:04:45 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffd, 0xf5, 0x200, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/205, 0xcd}]}, &(0x7f0000000380)="8dbe560b874f327182de3667271eb277c0019a5a9137191fa9459a349bb9a7acffb17470a42151e1a4e0ef882cb3d1798f0a59ff95c890436b94ea21c6e2532c184629cea03b464fccbfafd644aae7bf9adc1300e2612d99a9d0347078855d00bff849487a89b6aa52616c1f374a2dd0a2b4f0d98e4fcaaa4ce7330d5427a413add494a06a52a3911efb426dfd24d7aa9ddd7c31c693c5f8980d47d6010ab6321cb43269d6dfa88019d8220748ce2622a33799be6d167454e70f821f0278e294c8862040145d8fc396f31a9a6d72334d2f08172e827a3716125baf3d5dcb79d31b5f83c73a805fefc6e9f91f491d17857edb14ec7b", &(0x7f0000000480)=""/60, 0x8, 0x0, 0x3, &(0x7f00000004c0)}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1b000000) 08:04:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x0) 08:04:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x242c00, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0x100000001, 0x0, [], {0x0, @reserved}}) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f00000005c0)=ANY=[], 0x0) io_setup(0x104, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x400000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r6, &(0x7f0000001580)="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", 0x0, 0x1}, 0x20) socket$inet6(0xa, 0x6, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000300)={0x100000, 0x15000, 0x0, 0x2, 0xfffffffffffffffd}) connect$l2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x4, {0xa, 0x4e22, 0x5, @ipv4={[], [], @broadcast}}}}, 0x32) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x220800, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000004c0)={0x7, 0x0, 0x0, 0x5, 0x1, 0x6}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3c4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x480, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r10, 0x80045400, &(0x7f0000000040)) close(r9) 08:04:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket(0x40000000000001e, 0x80e, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x0) 08:04:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:45 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) 08:04:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) 08:04:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x0) 08:04:45 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x9) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:46 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='posix_acl_access{.\x00', 0x13, 0x2) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) close(r0) 08:04:46 executing program 0 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:46 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:46 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00), 0x1, &(0x7f0000003300)=""/4096, 0xffffffffffffff05}, 0x0) 08:04:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1d000000) [ 1226.586335][ T4971] FAULT_INJECTION: forcing a failure. [ 1226.586335][ T4971] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.650837][ T4971] CPU: 1 PID: 4971 Comm: syz-executor.0 Not tainted 5.1.0-rc6+ #83 [ 1226.658786][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.668854][ T4971] Call Trace: [ 1226.672173][ T4971] dump_stack+0x172/0x1f0 [ 1226.676547][ T4971] should_fail.cold+0xa/0x15 [ 1226.681159][ T4971] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1226.681184][ T4971] ? ___might_sleep+0x163/0x280 [ 1226.681210][ T4971] __should_failslab+0x121/0x190 [ 1226.696974][ T4971] should_failslab+0x9/0x14 [ 1226.696993][ T4971] kmem_cache_alloc_trace+0x2d1/0x760 [ 1226.697009][ T4971] ? kasan_check_read+0x11/0x20 [ 1226.697038][ T4971] alloc_pipe_info+0xb9/0x430 [ 1226.697058][ T4971] splice_direct_to_actor+0x775/0x970 [ 1226.697073][ T4971] ? common_file_perm+0x238/0x720 [ 1226.697109][ T4971] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1226.732636][ T4971] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1226.738897][ T4971] ? do_splice_to+0x190/0x190 [ 1226.743598][ T4971] ? rw_verify_area+0x118/0x360 [ 1226.748464][ T4971] do_splice_direct+0x1da/0x2a0 [ 1226.753332][ T4971] ? splice_direct_to_actor+0x970/0x970 [ 1226.758904][ T4971] ? rw_verify_area+0x118/0x360 [ 1226.763774][ T4971] do_sendfile+0x597/0xd00 [ 1226.768216][ T4971] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1226.773528][ T4971] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1226.779779][ T4971] ? fput_many+0x12c/0x1a0 [ 1226.784208][ T4971] ? fput+0x1b/0x20 [ 1226.788043][ T4971] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 1226.793773][ T4971] ? __ia32_sys_sendfile64+0x220/0x220 [ 1226.799243][ T4971] ? do_fast_syscall_32+0xd1/0xc98 [ 1226.804359][ T4971] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1226.804378][ T4971] ? trace_hardirqs_on+0x67/0x230 [ 1226.804399][ T4971] do_fast_syscall_32+0x281/0xc98 [ 1226.804419][ T4971] entry_SYSENTER_compat+0x70/0x7f [ 1226.804430][ T4971] RIP: 0023:0xf7f63869 [ 1226.804446][ T4971] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 08:04:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:46 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 1226.804461][ T4971] RSP: 002b:00000000f5d5f0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1226.848616][ T4971] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 1226.848625][ T4971] RDX: 0000000000000000 RSI: 00000000800000bf RDI: 0000000000000000 [ 1226.848632][ T4971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.848638][ T4971] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1226.848647][ T4971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:04:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 08:04:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:46 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1dae}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffe}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x41) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x13c2}, 0x0) 08:04:46 executing program 1: syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x82082, 0x0) close(r0) 08:04:46 executing program 0 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:46 executing program 1: syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:46 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000340)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x400000000000040, 0x1, 0x4003}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x8, 0x81) syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) statx(r1, &(0x7f0000000140)='./file0\x00', 0x100, 0x2, &(0x7f0000000180)) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000380)) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x3}, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x2, 0x16]) 08:04:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1e000000) [ 1227.289120][ T5632] FAULT_INJECTION: forcing a failure. [ 1227.289120][ T5632] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.381892][ T5632] CPU: 0 PID: 5632 Comm: syz-executor.0 Not tainted 5.1.0-rc6+ #83 [ 1227.389933][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.400007][ T5632] Call Trace: [ 1227.403327][ T5632] dump_stack+0x172/0x1f0 [ 1227.407677][ T5632] should_fail.cold+0xa/0x15 [ 1227.412310][ T5632] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1227.418172][ T5632] ? ___might_sleep+0x163/0x280 [ 1227.423060][ T5632] __should_failslab+0x121/0x190 [ 1227.428028][ T5632] should_failslab+0x9/0x14 [ 1227.432734][ T5632] __kmalloc+0x2dc/0x740 [ 1227.436999][ T5632] ? alloc_pipe_info+0x103/0x430 [ 1227.442741][ T5632] ? alloc_pipe_info+0x199/0x430 [ 1227.447707][ T5632] alloc_pipe_info+0x199/0x430 [ 1227.452500][ T5632] splice_direct_to_actor+0x775/0x970 [ 1227.457914][ T5632] ? common_file_perm+0x238/0x720 [ 1227.462967][ T5632] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1227.468454][ T5632] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1227.473943][ T5632] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1227.479543][ T5632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1227.485838][ T5632] ? do_splice_to+0x190/0x190 [ 1227.490599][ T5632] ? rw_verify_area+0x118/0x360 [ 1227.495590][ T5632] do_splice_direct+0x1da/0x2a0 [ 1227.500511][ T5632] ? splice_direct_to_actor+0x970/0x970 [ 1227.506115][ T5632] ? rw_verify_area+0x118/0x360 [ 1227.511026][ T5632] do_sendfile+0x597/0xd00 [ 1227.515484][ T5632] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1227.520813][ T5632] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1227.527084][ T5632] ? fput_many+0x12c/0x1a0 [ 1227.531550][ T5632] ? fput+0x1b/0x20 [ 1227.535393][ T5632] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 1227.541163][ T5632] ? __ia32_sys_sendfile64+0x220/0x220 [ 1227.546665][ T5632] ? do_fast_syscall_32+0xd1/0xc98 [ 1227.551833][ T5632] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1227.557169][ T5632] ? trace_hardirqs_on+0x67/0x230 [ 1227.557205][ T5632] do_fast_syscall_32+0x281/0xc98 [ 1227.567314][ T5632] entry_SYSENTER_compat+0x70/0x7f [ 1227.572445][ T5632] RIP: 0023:0xf7f63869 [ 1227.572462][ T5632] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1227.572469][ T5632] RSP: 002b:00000000f5d5f0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1227.572482][ T5632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 1227.572489][ T5632] RDX: 0000000000000000 RSI: 00000000800000bf RDI: 0000000000000000 [ 1227.572497][ T5632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 08:04:47 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$vhci(r1, &(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, "97e3b761498194075253eca90b7cc032cf0296157aed3b22c7d4dc9688dbd0f6af8dcfa102042bcbc77d4fa1514ba8b0ed8e064f33de568cf4906e62ca6c397e9f56d753ca576a69b71ca849fdfaa1b69e891984dbe597d86129ef36381568ddd58dd07eb720326c7b312344d3873d9c7ee9e3d8ac0f2c1661f64663a27d491e4789a3afeb1d52674c1412ec04"}, 0x8e) write$sndseq(r3, &(0x7f00000001c0)=[{0x1f, 0x2, 0x3, 0x2, @time={0x0, 0x1c9c380}, {0x4, 0xffffffffffff8000}, {0x40}, @addr={0x2, 0xb838}}, {0xfff, 0xa3b, 0xdd9c, 0x14, @tick=0x9, {0x6, 0xe676}, {0x1, 0x1}, @note={0x4, 0x5905, 0x1000, 0x2c6, 0x15}}, {0x3ff, 0x34f, 0x7, 0x1, @time={0x0, 0x1c9c380}, {0xfffffffffffffff7}, {0x80, 0x5}, @connect={{0x85, 0x5}, {0x63, 0x7}}}, {0x8000, 0x0, 0x6, 0x80, @time={r4, r5+10000000}, {0x3ff, 0xfffffffffffffffe}, {0x6, 0x1}, @addr={0x646, 0x83}}], 0x70) socket$inet(0x2, 0x800, 0x400000000007) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x3f, @broadcast, 0x4e24, 0x4, 'nq\x00', 0x8, 0x1, 0x7c}, {@remote, 0x4e24, 0x10000, 0xfffffffffffffff7, 0x3f, 0x18}}, 0x44) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'\x00', r2}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40, 0x3}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:47 executing program 1: syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) [ 1227.572506][ T5632] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1227.572512][ T5632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:04:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) syz_open_pts(r1, 0x101000) 08:04:47 executing program 0 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 1227.853711][ T5983] FAULT_INJECTION: forcing a failure. [ 1227.853711][ T5983] name failslab, interval 1, probability 0, space 0, times 0 08:04:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1227.959290][ T5983] CPU: 0 PID: 5983 Comm: syz-executor.0 Not tainted 5.1.0-rc6+ #83 [ 1227.967388][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.978959][ T5983] Call Trace: [ 1227.983506][ T5983] dump_stack+0x172/0x1f0 [ 1227.987933][ T5983] should_fail.cold+0xa/0x15 [ 1227.992591][ T5983] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1227.998452][ T5983] ? ___might_sleep+0x163/0x280 [ 1228.003339][ T5983] __should_failslab+0x121/0x190 08:04:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 1228.008589][ T5983] should_failslab+0x9/0x14 [ 1228.013178][ T5983] kmem_cache_alloc_node_trace+0x270/0x720 [ 1228.019179][ T5983] ? lock_downgrade+0x880/0x880 [ 1228.024069][ T5983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1228.030454][ T5983] __kmalloc_node+0x3d/0x70 [ 1228.035012][ T5983] kvmalloc_node+0x68/0x100 [ 1228.039581][ T5983] iov_iter_get_pages_alloc+0x862/0x1350 [ 1228.045266][ T5983] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1228.050905][ T5983] ? retint_kernel+0x2d/0x2d 08:04:47 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x220080, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0xf5, 0x101, 0x200, 0x8}, &(0x7f00000000c0)=0x98) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r2) [ 1228.055581][ T5983] ? iov_iter_revert+0xaa0/0xaa0 [ 1228.060783][ T5983] ? aa_file_perm+0x40b/0xeb0 [ 1228.069404][ T5983] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1228.075265][ T5983] ? iov_iter_pipe+0xba/0x2f0 [ 1228.079984][ T5983] default_file_splice_read+0x199/0x890 [ 1228.086598][ T5983] ? lock_downgrade+0x880/0x880 [ 1228.091483][ T5983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1228.091511][ T5983] ? iter_file_splice_write+0xbe0/0xbe0 [ 1228.105078][ T5983] ? aa_path_link+0x460/0x460 [ 1228.109912][ T5983] ? percpu_ref_put_many+0x94/0x190 [ 1228.115282][ T5983] ? percpu_ref_put_many+0x94/0x190 [ 1228.120718][ T5983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1228.127018][ T5983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.132536][ T5983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.138028][ T5983] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1228.143344][ T5983] ? retint_kernel+0x2d/0x2d [ 1228.148081][ T5983] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1228.153972][ T5983] ? fsnotify+0xbc0/0xbc0 [ 1228.153998][ T5983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.154017][ T5983] ? retint_kernel+0x2d/0x2d [ 1228.154036][ T5983] ? iter_file_splice_write+0xbe0/0xbe0 [ 1228.154054][ T5983] ? iter_file_splice_write+0xbe0/0xbe0 [ 1228.154067][ T5983] do_splice_to+0x12a/0x190 [ 1228.154084][ T5983] splice_direct_to_actor+0x2d2/0x970 [ 1228.154099][ T5983] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1228.154118][ T5983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1228.154143][ T5983] ? do_splice_to+0x190/0x190 [ 1228.168782][ T5983] ? rw_verify_area+0x118/0x360 [ 1228.168801][ T5983] do_splice_direct+0x1da/0x2a0 [ 1228.168820][ T5983] ? splice_direct_to_actor+0x970/0x970 [ 1228.168848][ T5983] do_sendfile+0x597/0xd00 [ 1228.168873][ T5983] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1228.232985][ T5983] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1228.239349][ T5983] ? fput_many+0x12c/0x1a0 [ 1228.244136][ T5983] ? fput+0x1b/0x20 [ 1228.248026][ T5983] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 1228.253787][ T5983] ? __ia32_sys_sendfile64+0x220/0x220 [ 1228.259493][ T5983] ? do_fast_syscall_32+0xd1/0xc98 [ 1228.264684][ T5983] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1228.270065][ T5983] ? trace_hardirqs_on+0x67/0x230 [ 1228.275138][ T5983] do_fast_syscall_32+0x281/0xc98 [ 1228.280204][ T5983] entry_SYSENTER_compat+0x70/0x7f [ 1228.285386][ T5983] RIP: 0023:0xf7f63869 [ 1228.289497][ T5983] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 08:04:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 08:04:48 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10140800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00042abd7000fddbdf2400"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0xc0000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) 08:04:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 1228.309401][ T5983] RSP: 002b:00000000f5d5f0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1228.317837][ T5983] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 1228.325845][ T5983] RDX: 0000000000000000 RSI: 00000000800000bf RDI: 0000000000000000 [ 1228.333882][ T5983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.342501][ T5983] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1228.350975][ T5983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:04:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:48 executing program 0 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x7ffffffc, &(0x7f0000ffb000/0x3000)=nil, 0x80001) close(r0) poll(&(0x7f0000000000)=[{r0, 0x400}, {r0, 0x4124}, {r0, 0x1086}, {r0, 0x100}, {r0}, {r0, 0x42a}, {r0, 0x4080}], 0x7, 0x3ff) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xc0080, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) write$P9_RSTATu(r1, &(0x7f00000003c0)={0xae, 0x7d, 0x1, {{0x0, 0x56, 0x4, 0x100000000, {0xc8, 0x3, 0x2}, 0x80800000, 0x88, 0x9, 0xcae, 0xf, '/dev/vhost-net\x00', 0x9, 'cgroup^{[', 0x0, '', 0xb, '/proceth0%:'}, 0x43, '+vboxnet1ppp1^em1selinuxmime_type*cgroupe/\xed(wlan1wlan0usermime_type', r2, r3, r4}}, 0xae) 08:04:48 executing program 2: r0 = socket(0x7, 0x5, 0x4) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x2, 0x0, 0x2, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x19}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1228.706764][ T6489] FAULT_INJECTION: forcing a failure. [ 1228.706764][ T6489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:04:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 1228.808248][ T6489] CPU: 0 PID: 6489 Comm: syz-executor.0 Not tainted 5.1.0-rc6+ #83 [ 1228.816615][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.826736][ T6489] Call Trace: [ 1228.830096][ T6489] dump_stack+0x172/0x1f0 [ 1228.834486][ T6489] should_fail.cold+0xa/0x15 [ 1228.839176][ T6489] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1228.845075][ T6489] ? ___might_sleep+0x163/0x280 [ 1228.850000][ T6489] should_fail_alloc_page+0x50/0x60 [ 1228.855315][ T6489] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1228.860782][ T6489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.866334][ T6489] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1228.872136][ T6489] ? retint_kernel+0x2d/0x2d [ 1228.876800][ T6489] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1228.882506][ T6489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.888076][ T6489] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1228.894374][ T6489] alloc_pages_current+0x107/0x210 [ 1228.899665][ T6489] push_pipe+0x3fc/0x7a0 [ 1228.903986][ T6489] iov_iter_get_pages_alloc+0x8c2/0x1350 [ 1228.909689][ T6489] ? iov_iter_revert+0xaa0/0xaa0 [ 1228.918164][ T6489] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1228.918181][ T6489] ? iov_iter_pipe+0xba/0x2f0 [ 1228.918205][ T6489] default_file_splice_read+0x199/0x890 [ 1228.918222][ T6489] ? retint_kernel+0x2d/0x2d [ 1228.918238][ T6489] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1228.918265][ T6489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.957838][ T6489] ? iter_file_splice_write+0xbe0/0xbe0 [ 1228.963438][ T6489] ? retint_kernel+0x2d/0x2d [ 1228.968873][ T6489] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 1228.968889][ T6489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1228.968906][ T6489] ? fsnotify+0x811/0xbc0 [ 1228.968924][ T6489] ? fsnotify+0xbc0/0xbc0 [ 1228.968940][ T6489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.968954][ T6489] ? fsnotify_first_mark+0x210/0x210 [ 1228.968982][ T6489] ? retint_kernel+0x2d/0x2d [ 1229.005402][ T6489] ? security_file_permission+0x94/0x380 [ 1229.011200][ T6489] ? iter_file_splice_write+0xbe0/0xbe0 [ 1229.016864][ T6489] do_splice_to+0x12a/0x190 [ 1229.021748][ T6489] splice_direct_to_actor+0x2d2/0x970 [ 1229.027280][ T6489] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1229.033478][ T6489] ? do_splice_to+0x190/0x190 [ 1229.039753][ T6489] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1229.046195][ T6489] do_splice_direct+0x1da/0x2a0 [ 1229.054282][ T6489] ? splice_direct_to_actor+0x970/0x970 [ 1229.060009][ T6489] ? rw_verify_area+0x118/0x360 [ 1229.065036][ T6489] do_sendfile+0x597/0xd00 [ 1229.069561][ T6489] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1229.076047][ T6489] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1229.082808][ T6489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1229.088579][ T6489] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 1229.094388][ T6489] ? __ia32_sys_sendfile64+0x220/0x220 [ 1229.100133][ T6489] do_fast_syscall_32+0x281/0xc98 [ 1229.105260][ T6489] entry_SYSENTER_compat+0x70/0x7f [ 1229.111000][ T6489] RIP: 0023:0xf7f63869 [ 1229.115160][ T6489] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1229.135681][ T6489] RSP: 002b:00000000f5d5f0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1229.144120][ T6489] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 08:04:48 executing program 5: userfaultfd(0x80000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x6a000000, 0xffffffffffffffff, 0x9}, 0x10) [ 1229.152279][ T6489] RDX: 0000000000000000 RSI: 00000000800000bf RDI: 0000000000000000 [ 1229.160305][ T6489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1229.168363][ T6489] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1229.176523][ T6489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:04:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x29000000) 08:04:48 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x10001, &(0x7f0000000e00)=""/4096) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:48 executing program 0 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 08:04:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x100000, 0x4) close(r0) 08:04:49 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg(r0, &(0x7f0000000080)={&(0x7f00004aeb5c)=@xdp={0x2c, 0x3, r1, 0x1c}, 0x1a1, 0x0, 0xfffffffffffffe0b}, 0x6) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:49 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x6, 0x4d1}, &(0x7f0000000140)=0x8) recvmmsg(r0, 0x0, 0xfffffeeb, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x11) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x1ff) 08:04:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x38000000) 08:04:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) socket$can_bcm(0x1d, 0x2, 0x2) 08:04:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1230.008811][ T7303] FAULT_INJECTION: forcing a failure. [ 1230.008811][ T7303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1230.071811][ T7303] CPU: 0 PID: 7303 Comm: syz-executor.0 Not tainted 5.1.0-rc6+ #83 [ 1230.081533][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.091781][ T7303] Call Trace: [ 1230.095226][ T7303] dump_stack+0x172/0x1f0 [ 1230.099757][ T7303] should_fail.cold+0xa/0x15 [ 1230.106655][ T7303] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1230.112769][ T7303] ? ___might_sleep+0x163/0x280 [ 1230.117717][ T7303] should_fail_alloc_page+0x50/0x60 [ 1230.123120][ T7303] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1230.128633][ T7303] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1230.134453][ T7303] ? get_task_policy.part.0+0x97/0xb0 [ 1230.140195][ T7303] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 1230.145923][ T7303] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1230.153907][ T7303] alloc_pages_current+0x107/0x210 [ 1230.159093][ T7303] push_pipe+0x3fc/0x7a0 [ 1230.163614][ T7303] iov_iter_get_pages_alloc+0x8c2/0x1350 [ 1230.169988][ T7303] ? iov_iter_revert+0xaa0/0xaa0 [ 1230.175029][ T7303] default_file_splice_read+0x199/0x890 [ 1230.180693][ T7303] ? lock_downgrade+0x880/0x880 [ 1230.185632][ T7303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.192062][ T7303] ? iter_file_splice_write+0xbe0/0xbe0 [ 1230.197731][ T7303] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1230.203305][ T7303] ? aa_path_link+0x460/0x460 [ 1230.208098][ T7303] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1230.213836][ T7303] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1230.219973][ T7303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.226365][ T7303] ? fsnotify+0x811/0xbc0 [ 1230.230817][ T7303] ? fsnotify+0xbc0/0xbc0 [ 1230.235328][ T7303] ? fsnotify_first_mark+0x210/0x210 [ 1230.240725][ T7303] ? security_file_permission+0x94/0x380 [ 1230.247377][ T7303] ? iter_file_splice_write+0xbe0/0xbe0 [ 1230.255922][ T7303] do_splice_to+0x12a/0x190 [ 1230.260721][ T7303] splice_direct_to_actor+0x2d2/0x970 [ 1230.266199][ T7303] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1230.271861][ T7303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.278172][ T7303] ? do_splice_to+0x190/0x190 [ 1230.283049][ T7303] ? rw_verify_area+0x118/0x360 [ 1230.288156][ T7303] do_splice_direct+0x1da/0x2a0 [ 1230.293097][ T7303] ? splice_direct_to_actor+0x970/0x970 [ 1230.298728][ T7303] ? rw_verify_area+0x118/0x360 [ 1230.303622][ T7303] do_sendfile+0x597/0xd00 [ 1230.308118][ T7303] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1230.308138][ T7303] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1230.308149][ T7303] ? fput_many+0x12c/0x1a0 [ 1230.308160][ T7303] ? fput+0x1b/0x20 [ 1230.308182][ T7303] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 1230.334000][ T7303] ? __ia32_sys_sendfile64+0x220/0x220 [ 1230.339544][ T7303] ? do_fast_syscall_32+0xd1/0xc98 [ 1230.344739][ T7303] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1230.350151][ T7303] ? trace_hardirqs_on+0x67/0x230 [ 1230.355306][ T7303] do_fast_syscall_32+0x281/0xc98 [ 1230.360454][ T7303] entry_SYSENTER_compat+0x70/0x7f [ 1230.365670][ T7303] RIP: 0023:0xf7f63869 [ 1230.369799][ T7303] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1230.389667][ T7303] RSP: 002b:00000000f5d5f0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1230.398133][ T7303] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 1230.398146][ T7303] RDX: 0000000000000000 RSI: 00000000800000bf RDI: 0000000000000000 [ 1230.398153][ T7303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1230.398160][ T7303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1230.398166][ T7303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:04:50 executing program 0 (fault-call:3 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:50 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x200, 0x800, 0x7, r1}, &(0x7f0000000140)=0x10) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 08:04:50 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:50 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @output={0x0, 0x1, {0x5, 0xfff}, 0x9, 0x401}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) close(r1) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x2200) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x40000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000100)=0x6) epoll_create(0x76) [ 1230.581319][ T7543] FAULT_INJECTION: forcing a failure. [ 1230.581319][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.612369][ T7543] CPU: 0 PID: 7543 Comm: syz-executor.1 Not tainted 5.1.0-rc6+ #83 [ 1230.620419][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.630575][ T7543] Call Trace: [ 1230.633983][ T7543] dump_stack+0x172/0x1f0 [ 1230.638714][ T7543] should_fail.cold+0xa/0x15 [ 1230.643795][ T7543] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1230.649939][ T7543] ? ___might_sleep+0x163/0x280 [ 1230.654971][ T7543] __should_failslab+0x121/0x190 [ 1230.660063][ T7543] should_failslab+0x9/0x14 [ 1230.664749][ T7543] __kmalloc_track_caller+0x2d8/0x740 [ 1230.670301][ T7543] ? __snd_timer_user_ioctl.isra.0+0x104/0x1fd0 [ 1230.676736][ T7543] memdup_user+0x26/0xb0 [ 1230.681190][ T7543] __snd_timer_user_ioctl.isra.0+0x104/0x1fd0 [ 1230.687327][ T7543] ? snd_timer_user_open+0x190/0x190 [ 1230.692716][ T7543] ? lock_acquire+0x16f/0x3f0 [ 1230.697491][ T7543] ? snd_timer_user_ioctl_compat+0xe8/0x680 [ 1230.703625][ T7543] ? __mutex_lock+0x3cd/0x1310 [ 1230.708577][ T7543] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1230.715110][ T7543] ? tomoyo_init_request_info+0x105/0x1d0 [ 1230.721089][ T7543] ? snd_timer_user_ioctl_compat+0xe8/0x680 [ 1230.727094][ T7543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.733721][ T7543] ? mutex_trylock+0x1e0/0x1e0 [ 1230.738675][ T7543] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1230.745195][ T7543] ? __fget+0x35a/0x550 [ 1230.750615][ T7543] snd_timer_user_ioctl_compat+0x293/0x680 [ 1230.756663][ T7543] ? __snd_timer_user_ioctl.isra.0+0x1fd0/0x1fd0 [ 1230.763146][ T7543] ? __fget+0x381/0x550 [ 1230.767463][ T7543] ? ksys_dup3+0x3e0/0x3e0 [ 1230.771998][ T7543] ? fput+0x1b/0x20 [ 1230.775959][ T7543] ? tomoyo_file_ioctl+0x23/0x30 08:04:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1230.781041][ T7543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.787480][ T7543] ? security_file_ioctl+0x93/0xc0 [ 1230.792692][ T7543] ? __snd_timer_user_ioctl.isra.0+0x1fd0/0x1fd0 [ 1230.799434][ T7543] __ia32_compat_sys_ioctl+0x197/0x620 [ 1230.805522][ T7543] do_fast_syscall_32+0x281/0xc98 [ 1230.810685][ T7543] entry_SYSENTER_compat+0x70/0x7f [ 1230.816471][ T7543] RIP: 0023:0xf7f16869 [ 1230.820642][ T7543] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1230.840308][ T7543] RSP: 002b:00000000f5d120cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1230.840330][ T7543] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f85403 [ 1230.840337][ T7543] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1230.840343][ T7543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1230.840350][ T7543] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 08:04:50 executing program 5: close(0xffffffffffffffff) write$vnet(0xffffffffffffffff, &(0x7f00000000c0)={0x1, {&(0x7f0000000000)=""/151, 0x97, &(0x7f0000000180)=""/197, 0x3, 0x5}}, 0x68) 08:04:50 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002100000025bd7000fcdbdf250a30000843000000001000a2be13908a"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6b5, 0xe2c7d400973d8ffa) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000300)={0x50000, 0x0, [0x2, 0x20, 0x1, 0x100000001, 0x5, 0x6, 0x44c, 0x3f]}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000180)={0xfffffff, 0x2, 0x2, [], &(0x7f0000000140)={0xbb0b77, 0x3, [], @value=0xffffffffffffffc0}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002bbd7000fddbdf250100000000000000014100000014001700000018000000086574683a6e7230008b660b0e29213a64c8d60fc7363de51d4b5561ecb2c5e9051a9833ad0022e31eee5e12daa654774944876cce62aced02912a9b53c78fc9ae54ac43e7e4e60278072e055a2259f690f672c8c7df90c9bebb22421476686308431d3cf3c8d25c23206610b4f30aa612035b4c7e7f4c0e2095f64dd2470130f6a482d690f6c13d45f4ab030e5ea2831c9a1408a62e7e7255b70659b9324cbae48e473e920d446d10f887b8e0204313111a1d5a694717904d73f8e5e459"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8050) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) [ 1230.840356][ T7543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:04:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:04:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:50 executing program 5: close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42802, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0xa, [0x6, 0x5, 0x6, 0x40, 0x9, 0x0, 0x20000000000, 0x1, 0x6, 0x2]}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0xc) 08:04:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x2, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 08:04:51 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r2, 0x0, 0x800000bf) fremovexattr(r1, &(0x7f0000000040)=@random={'security.', '/dev/vcsa#\x00'}) 08:04:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xdc, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000300)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000000340)=[0x38, 0x48, 0x38, 0x78, 0x0]}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000440)=[@fda={0x66646185, 0x1, 0x0, 0x29}], &(0x7f0000000640)=[0x60, 0x38]}, 0x1384}}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000380)=[@fda={0x66646185, 0x8, 0x4, 0x36}, @fda={0x66646185, 0xa, 0x2, 0x12}, @flat={0x776a2a85, 0x10a, 0x0, 0x2}], &(0x7f0000000400)=[0x28, 0x0]}, 0x400}}], 0x1, 0x7a000000, &(0x7f0000000080)='r'}) close(r0) 08:04:51 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge_slave_0\x00') 08:04:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1231.700593][ T8545] binder_alloc: 8478: binder_alloc_buf, no vma [ 1231.777007][ T8545] binder: 8478:8545 transaction failed 29189/-3, size 0-0 line 3148 08:04:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x7fffffff) 08:04:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x48000000) 08:04:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x541b, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:51 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x80000001, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x0, 0x7, 0x3, 0x1, 0x401, 0x9, 0xfffffffffffffff8, 0x8}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'syzkaller0\x00'}) 08:04:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1232.083756][ T6374] binder: undelivered TRANSACTION_ERROR: 29189 08:04:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x1, 0x6, 0x1, 0x0, 0x0, [{r0, 0x0, 0x8001}]}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:04:51 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x100000000, 0x0, "93621ba5991060897bcd517f8d1e1469e30c0d7cf7f232b4d5cecf7a92220260624a2e413e58fcd11e097b9f854350a430565c43c69de0274500da4e9b556d7b60ce656f4769c6621fca10fd6c0a449c"}, 0xd8) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x1a0000}, 0xffffff45, 0x0, 0x18b}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff84, &(0x7f0000000200)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x10141) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 08:04:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x4c000000) 08:04:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xcf5d, 0x220200) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/7}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) 08:04:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$unix(0x1, 0x7, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r2, r3, 0x0, 0x800000bf) 08:04:52 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x42, 0x1}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0xfffffffffffffe8e) 08:04:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:52 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x40200) sendfile64(r0, r1, &(0x7f0000000040), 0x7ff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r2) 08:04:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x60000000) 08:04:52 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xff, 0x8, 0x9, 0xfff, 0x8}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0x8661}, &(0x7f00000001c0)=0x8) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x4000040}, 0x9a) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x81, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000240)=0x104, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) tgkill(r3, r4, 0x9) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5421, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendto(r0, &(0x7f0000000000)="e8cce2ab4eac91dc740bb6ec4b864c96fb6912e37945f9319dcd51d20c0c62882cd1924c", 0x24, 0x20000004, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000140)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth0_to_team\x00', 0xf1d}) 08:04:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:53 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0xa, 0x0, [], [{0x7fff, 0x1, 0x8, 0x3, 0x6, 0xfc}, {0x9, 0x5, 0x2, 0x8, 0x40, 0x3f}], [[], [], [], [], [], [], [], [], [], []]}) 08:04:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x60182300) 08:04:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:53 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'batadv0\x00'}, 0x18) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0xfffffffffffffffd) 08:04:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5422, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:53 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x80000000) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x6, 0xfff, 0x6, 0x4, 0x8001}) close(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) 08:04:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:53 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) r3 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000240)={0x6a, 0x7d, 0x1, {{0x0, 0x54, 0x0, 0x7, {0x4, 0x0, 0x3}, 0x19000000, 0x3, 0x47, 0x65e, 0xd, 'net/sockstat\x00', 0x7, '*proc]-', 0x0, '', 0xd, 'net/sockstat\x00'}, 0x1, '&', r3, r4, r5}}, 0x6a) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 08:04:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x63000000) 08:04:53 executing program 5: close(0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x42600, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000080)=0x2) 08:04:54 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5423, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:54 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x80) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000340)=0x2b, 0x4) r1 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0x0, 0x8, {{0x4, 0x0, 0x4, 0x3, 0x5, 0x101, {0x5, 0x7, 0x0, 0x5, 0x9, 0x40, 0x8, 0xfffffffffffffffc, 0x8001, 0x4, 0x9, r3, r4, 0x5}}, {0x0, 0x1}}}, 0xa0) 08:04:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88000020}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x208, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendfile(r1, r0, 0x0, 0x800000bf) 08:04:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) close(r0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x101000, 0x0) getpeername$tipc(r2, &(0x7f0000000100), &(0x7f0000000180)=0x10) syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x100, 0x480200) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000080)='syzkaller1\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) sendfile64(r0, r0, 0x0, 0x5) 08:04:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:54 executing program 2: r0 = socket(0x40000000000001e, 0x800000080803, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x1000, 0x4) 08:04:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x65044608) 08:04:54 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5450, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r0, 0x0, 0x800000bf) 08:04:54 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) 08:04:54 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000040)=""/101, 0x65}], 0x2, &(0x7f0000000100)=""/132, 0x84}, 0x20) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:54 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5452, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) munlockall() close(r0) 08:04:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x68000000) 08:04:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r0, 0x0, 0x9) 08:04:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:55 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) close(r0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x42400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) r3 = getegid() fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1100) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x4) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) 08:04:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:55 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0xffffffffffffff5b) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 08:04:55 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5460, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6c000000) [ 1235.878637][T12498] QAT: Invalid ioctl 08:04:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/sockstat\x00') sendfile(r0, r2, 0x0, 0x800000bf) 08:04:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:55 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x101000, 0x0) sendmsg$alg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000200)="fc28da9e1db22af0fc90c1b685ba83e1685ed87c080dca83b23b0d78013300be2b93d73d124b10244161ab7403b7ef18dbe708e92f58b7d262465ef79af04e4d5bbba8b5bc934904b1512f781a64cc40079794317f4618f82ce7d8a148c609d5ed2063f9c0", 0x65}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="335f11a69e399f78b134e1817d53cc404840444e13a13bfd92785e75485bcbcf61a08ca809cd1647c64b656f0f555f1193715c946bc15486ca9a694568cfb9d151efe2901198a0d2dc88645815d24d672920bb98b9c1ebee3166804fed8f0b3a81d96b31b4b0d68a47269ab7fdab12dc9678d2a6877e5ec72eedb5a1b91b06c98e047067628de5b935b87b", 0x8b}, {&(0x7f0000001340)="92150127cd517ea7e2aba97d8285e7147dd0fddae525ffad75e5d5d20750acbdaa2a139f60a9024f7b76d1c3f0b255f85585bff99c460d0effa997a99c1ec2e5de913b7accbf36562606ea8e78ecaa956e6c0fca9221965e2478ea0d0ed666bb8ed93fc168bf955fc0ee30f1ef7aeed414d4b736de77eef03abe80ca1316de09b23a3e90fa730a0370602eed73b027aaf7e5e04f698eb14752de2759ac0ac11574457db6ce2739a6c820977b28eb00923f905240d7cef70af99152361dd791b69955cdc3b1203ca71b64b017e4ecec5d10c603b6ed595d6c549b6f77c45308606d176977dcb6357186acbc2c6c971dbfc06e1585", 0xf4}, {&(0x7f0000001440)="416f999a7a599006ce1576d68fe4e56c7e67199f446060b6dc89f96e9620879ea2d64d775cf24b97c1d750b8b802ee606be0c321953ed65c139706c651e346eb0665abb0beb8eeee9c9f8f3c86d7dfea2b42db5e7dd714b09a0084eb3619c7b1f7b96256380707f36f896316fc85b3710bbc1c9c0bfd6d1063eb79590a58b119570955cafe78ac61c7553d18fc67f2f23b85807c1abcb454f3b3445ba58c19de3acb016f5d48c83bb73b2843cd6ce6fd459a7f6d6d182dae03c9a7dc82c1647431b65c45dc41a43c77c67263c72dfa5976b613830507480ac941cdb4df6a4f59db20cc", 0xe3}, {&(0x7f0000001540)="613fb99e5807470501fa996ae714ceec0cafd32fcfb7f620e6834bb94cf8219c7bec7cd054df711900d237c8393404bfc260c0a06766b81ff57e0c5143a2049c76320443b21a2a2eda49899007b4f8abe0dba2fb582a24e9b79e36f628eabc4d3c816ef02d7e98f86bc549cd939965607209f5662e93aded3a6cd0e47893d91d080842b001acb887986e93a262dfd8beee1c703f863dfb21", 0x98}], 0x6, &(0x7f0000001640)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4004800}, 0x8004) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x43a, 0x1c31, 0x3, 0x4, 0x31}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0xb2, 0x7, 0x8}, &(0x7f00000000c0)=0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r2) 08:04:55 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:55 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x54a0, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x74000000) 08:04:56 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) fsync(r0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x1, 0x401, 0x9, 0x2, 0x0, 0x7343, 0x20200, 0x3, 0x0, 0xfff, 0xfffffffffffff801, 0xfffffffffffffc01, 0x6, 0x3f, 0x5, 0x2, 0x7, 0x3, 0x7f, 0x5321, 0x7ff, 0x20, 0x3, 0x6, 0x9, 0x1, 0x2000000000000, 0x81, 0x200, 0x0, 0xcb2b, 0x7f, 0x6, 0x40, 0x6, 0xfffffffffffffffc, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000040), 0xf}, 0x400, 0x80000001, 0x100000000, 0x9, 0x8, 0x400000000000, 0xffffffffffffffac}, r1, 0x8, 0xffffffffffffffff, 0xa) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x84040, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000140)) socketpair$unix(0x1, 0xffffffffffffeffd, 0x0, &(0x7f00000001c0)) flock(r2, 0xa) 08:04:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc2900, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x7}, &(0x7f0000000180)=0x8) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000000)={0x16, ""/22}) sendfile(r2, r3, 0x0, 0x800000bf) 08:04:56 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x1000000000000) 08:04:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x54a1, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:56 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet6(0x10, 0x5, 0x10000000000107) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00030000000d000500ff630008e34f040a1a3ad5570800c78b80082314e9030b9d566885b1766732009b84e7b1df136ef75a", 0x55}], 0x1}, 0x4000091) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000180)=0x20000000) close(r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff, 0x30000) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0xff37, 0x9a8, 0x2, 0x8}, {0x10001, 0x8, 0xfff, 0xfffffffffffeffff}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x1, 0x1, &(0x7f0000000380)=""/81, &(0x7f0000000480)=""/177, &(0x7f0000000400)=""/56, 0x3000}) 08:04:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x7a000000) 08:04:56 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='-($\x00', 0x4, 0x3) 08:04:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x54a2, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:56 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000000c0)=0x20000a6) close(0xffffffffffffffff) 08:04:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x2, 0xec25e52c3f04ae06) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000080)=0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x200000, 0x0) sendmsg$rds(r1, &(0x7f0000000cc0)={&(0x7f0000000400)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/148, 0x94}], 0x3, &(0x7f0000000a80)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffffffffff2f, 0xc}, {&(0x7f0000000700)=""/85, 0x55}, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/16, 0x10}], 0x1, 0x21, 0xfffffffffffffffd}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffffffffeff}}, @cswp={0x58, 0x114, 0x7, {{0x200, 0xd8a}, &(0x7f0000000800)=0x6, &(0x7f0000000840)=0x10001, 0x5, 0x7f, 0xff, 0x3f, 0x10, 0x6}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x80000000}, @mask_fadd={0x58, 0x114, 0x8, {{0x7ff, 0x8}, &(0x7f0000000880)=0x800, &(0x7f00000008c0)=0x6, 0x401, 0x9, 0x9, 0x8, 0x0, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x833, 0x550400000}}, @mask_fadd={0x58, 0x114, 0x8, {{0x40, 0x7}, &(0x7f0000000900)=0x400, &(0x7f0000000940)=0x32, 0x1, 0x400000000000000, 0xff, 0xfffffffeffffffff, 0x40, 0x7f}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x8001}, &(0x7f0000000980)=0x7, &(0x7f00000009c0)=0xfcfa, 0x10001, 0x8, 0x3, 0x8000, 0x20, 0xefa}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x4}, &(0x7f0000000a00)=0x5, &(0x7f0000000a40)=0xffffffffffffffe8, 0x0, 0x6, 0x80, 0xfffffffffffffffa, 0x1, 0x80}}], 0x240, 0x4000000}, 0x20004000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TUNATTACHFILTER(r3, 0x400854d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3, 0xffffffffffffff80, 0x9, 0x4}, {0x2c96, 0x2, 0x1, 0x1}, {0x100000000, 0x2, 0x1b, 0x1}, {0x400, 0x9, 0xfff, 0x9}, {0x400, 0x100, 0x6b, 0x1}]}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0x0, 0x7, {{0x2, 0x3, 0x1, 0xff, 0x5, 0x3, {0x1, 0x3, 0xd3, 0xfffffffffffffe00, 0x3, 0x8, 0x4, 0x7, 0x2f20, 0x81, 0x9, r4, r5, 0x95d, 0x6}}, {0x0, 0x2}}}, 0xa0) 08:04:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:56 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x8000) 08:04:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x80040000) 08:04:57 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x80800) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) close(r0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 08:04:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:57 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x54a3, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:57 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1, &(0x7f0000000e00)=""/4096, 0x10ad}, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000000040)=@vsock, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000400)=""/32, 0x20}], 0x5, &(0x7f0000000480)=""/255, 0xff}, 0x100}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/9, 0x9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/142, 0x8e}], 0x3, &(0x7f00000007c0)=""/164, 0xa4}, 0x8}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/48, 0x30}], 0x1, &(0x7f0000000900)=""/167, 0xa7}, 0x8}, {{&(0x7f00000009c0)=@caif=@dgm, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/63, 0x3f}, {&(0x7f0000000a80)=""/31, 0x1f}, {&(0x7f0000000ac0)=""/160, 0xa0}], 0x3, &(0x7f0000000bc0)=""/137, 0x89}, 0x100000000}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000d80)=""/45, 0x2d}, {&(0x7f0000001e00)=""/188, 0xbc}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)=""/88, 0x58}], 0x4, &(0x7f0000001fc0)=""/246, 0xf6}, 0x3f}], 0x5, 0x2000, &(0x7f0000002180)={0x0, 0x1c9c380}) 08:04:57 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x7e3, 0x9c65, 0x4, 'queue0\x00', 0x8001}) 08:04:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:57 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x2a9}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000002c0)={0x6, 0x0, [{0x7, 0x72dd, 0x2, 0x100, 0x5, 0x3, 0x6000}, {0xc0000007, 0x7e, 0x3, 0x1, 0x4, 0x6, 0x80000000}, {0x1, 0x5, 0x7, 0x81, 0x3f, 0x6, 0x10001}, {0x80000008, 0x6, 0x2, 0x2, 0x401, 0xfff, 0x6}, {0x0, 0x80000001, 0x3, 0x0, 0x6, 0x6, 0x8}, {0xd, 0x8, 0x2, 0xcf7e, 0x800, 0x4bd7aaab, 0x9}]}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000240)=0x80000000, 0x4) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000400), &(0x7f0000000440)=0x4) write$P9_RLERROR(r1, &(0x7f00000003c0)={0xe, 0x7, 0x1, {0x5, 'user\x00'}}, 0xe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000e00)="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", 0x1000, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r2, 0x6, 0x5}, 0x0, &(0x7f00000000c0)="a67949b277a568270e8e29c396ef7a959d49bec8016cae9355b887eb5d66ed8928f81096192927e350fad544c11aebf666b2cdeed6b8744cfa34da09321e7db42f0a35759fca707eea9cdad04b3ab8537b82524bec9d6b9f7402ad65142ccefe", &(0x7f0000000140)=""/231) 08:04:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) iopl(0x401) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) 08:04:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:57 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x982a4608) 08:04:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x3f, 0x2}, 0x14) 08:04:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:58 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'ifb0\x00', 0x3}, 0x18) 08:04:58 executing program 2: r0 = socket(0x40000000000001e, 0x800000080806, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0, 0xfffffffffffffff2}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x60, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa02, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8000, 0xffffffffffffffe1, 0x5, 0xde}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) 08:04:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:58 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40049409, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) 08:04:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$int_out(r0, 0x0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x6, 0x6, 0x5327, 0x0, 0xf}) sendfile(r0, r1, 0x0, 0x800000bf) 08:04:58 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) fsync(r0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1, &(0x7f0000001e00)=""/4096, 0x1000}, 0x0) 08:04:58 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:04:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:58 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0xa040) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 08:04:58 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40, 0x0, 0x3}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 08:04:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 08:04:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x46, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40003, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0xffffffffffff7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) sendfile(r0, r1, 0x0, 0x800000bf) 08:04:58 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x4020940d, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:59 executing program 2: r0 = socket(0xd, 0x100800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x4e22, 0x0, 0x4e23, 0x9, 0x2, 0xa0, 0xa0, 0x89, 0x0, r1}, {0xc00000000000000, 0x6, 0x100, 0x1, 0x462d, 0x1, 0x9, 0x36d}, {0x7, 0x10000, 0x7, 0x15b}, 0x19, 0x0, 0x3, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d2, 0xff}, 0x2, @in=@local, 0x34ff, 0x4, 0x3, 0xffffffffffff0001, 0x4, 0x4}}, 0xe8) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) recvmmsg(r0, 0x0, 0x0, 0x2000000000000, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}) close(r0) 08:04:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x402c5828, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x80, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 08:04:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)="e76706e8be7a09a9ae24b4ae181c77c7ce1a7e7972362fdc9eeee786f8bef159871fd1bf838dd37feb4b6de17c01c5ff05541506cdc48024d9e10cebb4f0d256213d803f500bffe4d52ff77218ef1308a392b96443b91418e27206404f39794480fe1ae5575b008a325774513b9dd0bc23ff37e34d8b591319494d4bf1b183c2b70abdd246cb8522185e890cb600730788bb1bff4e", 0x95}, {&(0x7f00000000c0)="42ba2fe7d1bedaaef3674eaf1ea3573f715274050f2cafd2536b66499047b21d435cdab9973fd2cce16fe4d0e92085d2b0afaaf46c37f405e651f26197b878d83f35fe8973ae904f9833092e2cb859d63ae7bf89", 0x54}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="38e20157ec37ae76995113c92efb1848f750566e9b9d7a16ed9aac", 0x1b}, {&(0x7f00000011c0)="a95bc2facbd8b89ea0736b55c6fa875bdb7c22da7d3a77d92f6c92645feb88014c5a1b06abd56862b0bd694dfe2b4757b7a2bac3eb97e3bb4c9e504a8943943c2912c69c752f4531d03ebe7fbcdbc350af651fa29a64f50ddc2a13b453c211fb13853f81e5a4", 0x66}, {&(0x7f0000001240)="552d439e8f4dce79425850ff20291e07f102b9d66f218e", 0x17}, {&(0x7f0000001280)="ebf702116d7ea1f98bd7920eb8da9051c58505fcad6a2213aadafe45d22348b6680497c36a26d3bc762bdd2221b2768b984456815872d231fd59ece4884c34f591f805f645bd26405f5127ef98ddf4e6263603a6d1a060f6c1c1", 0x5a}, {&(0x7f0000001300)="a346e82350587a4298face6215cff2e86a070fa25a8672ccfca04543f8adecc87679fdc25469e833e7a870dd2e87db37febb3bb24658439fce0e7a8f74d2a40fcd3e995fca237feb52d3b7dd78379498d4cf7bfe9e84e153ba1dbed8c42cf3cc30605ebaec079e096eb2c450df2abe8117978e907bf348613baa7dd4756987ab4d038ff09e10ef235297721504a627919df137", 0x93}], 0x8, 0x0) 08:04:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:04:59 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x2) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x800000000000, 0x2}, 0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8008743f, &(0x7f0000000540)) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0xcb, @local, 0x4}}, 0x0, 0x4, 0x0, "1f47d3df3415b54c422c6d8314bd9d590100dabfd01291c5c7741be4c33851e3f27d48b8abe217fc758daf06bdcafc3beffb4c1237dc29d2da1824c3cd1d680331b74db583e26e1b5c037e29204ac078"}, 0xd8) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x4, 0xffffffffffffffda, 0x9, 0x6}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000580)={{0xa, 0x4e21, 0x0, @mcast2, 0x2}, {0xa, 0x4e22, 0x5, @rand_addr="b2cb16fee2f0d7959b83e23620cbc390", 0x1}, 0x3, [0x5, 0x0, 0x10001, 0x1, 0x1, 0x0, 0xdc, 0x101]}, 0x5c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x8) r3 = add_key(&(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="e09f403028733118c59e9b0069ae3e90dc65eb28adedf4339dd5f3ab132bdf95d093c4c7b6881987b2568409116f5f2fb18133f4edca85b03c5ee99759b12f84d25467c575e00df5500709f16724043c40879cc13c1ec239eae328ca95", 0x5d, 0xfffffffffffffffb) keyctl$read(0xb, r3, &(0x7f0000000500), 0x0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x0, 0x0, 0x1, 0x2}, 0x6) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000300)=""/212) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:04:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x7fb910ebd460) 08:04:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x402c582a, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:04:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x4c24, 0x2, 0x3, 0xfffffffffffffff7, 0xffffffff, 0x34a}, 0x10001, 0x0, 0x8}) 08:04:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) 08:05:00 executing program 2: r0 = dup(0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2, &(0x7f0000000100)=""/250, 0xfa}, 0x61) r1 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000) 08:05:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:00 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0x6) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x185, &(0x7f0000000d00), 0x20000000000001e5, &(0x7f0000000e00)=""/4096, 0x1224}, 0x0) 08:05:00 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3ff, 0x400) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xa3, "7c7af6187c1a36c94c952d33900d84a9905bfb05f532304cc0e5b40cb27d558bbb90ca546ed2a1f2270b1427b1b42988a4191f5b4c7054229167ddda925a683491e8d4a7ff44cffdc562276fde0c2a15ea1e90e4fcd1008da873ecb9f8e343c9bf9bc51ec6ebc1d6068d585c3b746f766fac2cf65b715d7612ea7f479f02ebd621b2f33efce137f1561f69a54e8875cbafefb11210d25f901a8f5dbb144698b5eb279d"}, &(0x7f0000000140)=0xab) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x3, @remote, 0xfff}}, 0x4, 0x7}, &(0x7f0000000240)=0x88) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r0) 08:05:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x77, "0af3cf14972c2c9df9bf43a2dcfc4a6a4e33337076194e8aa1e84ce70349d329a858dd557923e36e0e4a2bd603507a80a5a0eed0eb9c0e3bc5a216d5aba95fd8a1e4856425b4372137948bc3f2643264cee5b78544eebeb1e0ee15defa5e00cb47ce90ec6ca7953a8244577c2dd9609841a6ca92659eea"}, &(0x7f0000000200)=0x7f) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0xac}, &(0x7f0000000280)=0x8) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r3 = dup(r1) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000040)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x8000) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x403c5404, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xee0f0000000000) 08:05:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x2, "3450e3c88268cf98"}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4000009, 0x10000) sendfile(r0, r2, 0x0, 0x8800000bf) 08:05:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 08:05:01 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x8) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000ffdbdf250100007b0800000000000b000000000c1db01f24cff7e6da675bb259fc082fd4fef183e5a49b831f475d1ba68bd26eb71985087f2e01f4768239fad475aff14f0cf3186545b57eb1603d37fde77e69987195843ad3c10000000000000000000000000cc26428521fedf564b49fbdff03e3854e82fabeecbcee0628887eff23aeaf9ed56e2296632d4efb17"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x6}, 0xb) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, r3) 08:05:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40485404, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x501840, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @mcast1, 0x7}, {0xa, 0x4e21, 0x4, @mcast2, 0xff}, r2, 0x6}}, 0x48) close(r0) 08:05:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 08:05:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0x9, 0x7, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0xffffffff, 0x2, 0x4, 'queue0\x00', 0x40}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x109002, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x3f, 0x4) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40505412, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x2) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r1 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0xfffffffffffffeca, 0x0}, 0x8000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x220, 0x2) close(r0) 08:05:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:02 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40585414, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 08:05:02 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/sobkstat\x00') sendfile(r1, r3, 0x0, 0x800000bf) 08:05:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:02 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@md5={0x1, "0e0138f9e93e1284542670d0f44f7dad"}, 0x11, 0x2) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0), 0x4) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1, &(0x7f0000000e00)=""/4096, 0x1000}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x240000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000040)={{0x4, @addr=0x9}, "6edfe2b9bd9d7a7baf91a5e19bd6f1bca11a44781dc5757b61baafbe183f5c47", 0x1}) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xff, 0x400) 08:05:02 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x2, {0x40, 0x6, "9dac6d9da8484c564b40cc06563d7f3d50f20fa6b84429ac3653769419bf2e7465aed109008b036bea55e33be512f3020f1a3d9056963a5b7161b55433f4db6cd34ddc9abacbcdb10659764553a5fc6ea3fef20a6bc01b381b9dc81f08da877bbfd0b8f610ae49c4ada202e23cc25e72fda25ed728ce8d78c27870605e5eee00d46b51b987574c20dd7b4ab9a0a71928e8789ee08b05c4b7df5cba8e0c41bbc5cf2c7c2e26c97873696e3d63093ac631ce5351c006fc42e879f2c0c97ada89f5e50e2224b5e8cf2656997d40c0b65d9f6a3fb11f269e39ab619b5d2d83d40414684050871c0c045cb5e26f1020c4130105c00183847fe583f527a321fa0d7179", 0x84, 0x0, 0x401, 0xb52e, 0x3, 0x0, 0x5d, 0x1}, r1}}, 0x128) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) 08:05:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:02 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x40000000000004) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x140) write$P9_RSTAT(r1, &(0x7f0000000040)={0x7a, 0x7d, 0x2, {0x0, 0x73, 0x5, 0xffffffffffffff01, {0x18, 0x2, 0x6}, 0x14000000, 0x28f, 0x0, 0x7, 0x10, ',,eth1-eth0ppp0$', 0x3, '(!(', 0x2d, '}ppp1vmnet0GPLvboxnet0]%\\security\xe9%\'mime_type'}}, 0x7a) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x6, 0x3}) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 08:05:02 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40605414, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x102) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="2c000000900e9f8972f14c01b653b10f519a53e44f1d1233533de95cc6aaf37b14f5f4669e3802e80000000000000000"], &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8001}, 0x8) 08:05:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:03 executing program 0: ustat(0x10001, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:03 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x102, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 08:05:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:03 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80045400, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:03 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400100, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0xfffffffffffffff8) 08:05:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r0, 0x0, 0x800000bf) 08:05:03 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:03 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80605414, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:03 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x9) 08:05:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000080)={0x5, 0x5, 0x6, 0x80000001, '\x00', 0x4}) 08:05:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x400350800000000) 08:05:03 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x180000000000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x2, 0x1, 0x2, 0x8}, &(0x7f0000000180)=0x98) r2 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80e05411, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:04 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 08:05:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43, 0x9, 0x1, {0x401, 0x7, 0x9, 0x9, 0x7fffffff, 0x2, 0x1000, 0x3, 0x7}}, 0x43) r1 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x42500) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000100)=""/242) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$TIOCSBRK(r0, 0x5427) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 08:05:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80e85411, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:04 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) 08:05:04 executing program 2: r0 = socket(0x40000000100001e, 0x800000080804, 0x88004) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) syncfs(r0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x4, 0x0, "e32d9b18929ec2d4e80ce27d0532e10a4f305a9407df6f55bb524b2e5692f557", 0x7, 0xe88a, 0x8, 0x0, 0x204}) 08:05:04 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = gettid() r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200000) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xc03, 0x10001, 0xffff, 0xffff, 0x0, 0x1, 0x2001, 0x8, 0x1ffe0000, 0x70675b45, 0x4, 0x7fff, 0x30, 0x400, 0x1, 0xfffffffffffff274, 0x8, 0x79ce, 0x5, 0x1000, 0x0, 0x7, 0x2, 0xfffffffffffffffb, 0x100000000, 0x1, 0x80, 0x81, 0x1, 0x0, 0x1ff, 0x40, 0x2, 0xbe3c, 0x81, 0x9, 0x0, 0x44, 0x1, @perf_bp, 0x200, 0x5, 0x668457ff, 0x0, 0x3, 0x2, 0xff}, r1, 0xffffffffffffffff, r2, 0xa) 08:05:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0145401, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:04 executing program 2: r0 = socket(0x10, 0x5, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x2a8, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:04 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x11, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) 08:05:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 08:05:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) close(r0) 08:05:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0189436, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:05 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000000c0)={0x0, 0x8}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) getuid() recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x40, @empty, 0x1f}, r2}}, 0x30) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r3, 0x0, 0x800000bf) 08:05:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:05 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) fcntl$getflags(r0, 0x40b) socket$kcm(0x29, 0x7, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x202003) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0x5, 0x7fff, 0xff}) close(r1) 08:05:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc020660b, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 08:05:05 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000080)={0x0, 0x80, 0xf7, [], &(0x7f0000000040)={0x9e091b, 0x100000000, [], @p_u8=&(0x7f0000000000)=0x9}}) 08:05:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x993) 08:05:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:05 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x19, &(0x7f0000ffc000/0x1000)=nil, 0x1) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40801, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x20) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xd) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0505405, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 08:05:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) syncfs(r0) 08:05:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:06 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x0, 0x4) ioctl$sock_ifreq(r1, 0x89f7, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_hwaddr=@remote}) 08:05:06 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e23, @loopback}}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x300) syz_genetlink_get_family_id$tipc2(0x0) 08:05:06 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x800) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000080)="173eb08701cb9f813c4041397f682da0aa8dabadb5d15bb454509ab6371b5d") syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0xa970a8adcca81bd4) 08:05:06 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x2, 0x92}) 08:05:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo\x00') setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000380), 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @dev={[], 0x25}}, 0x10) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x426040) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0x9) r7 = socket$unix(0x1, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1b7) getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000003c0)=""/130) r8 = getpgid(0x0) r9 = syz_open_procfs(r8, &(0x7f0000000180)='\x00'/10) getpgid(r8) sendfile(r7, r9, 0x0, 0x800000bf) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 08:05:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) 08:05:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0xffffff1f) syz_genetlink_get_family_id$tipc2(0x0) 08:05:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:06 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x222000, 0x0) inotify_init() ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0245629, &(0x7f0000000080)={0x0, 0x3, 0x3f, [], &(0x7f0000000040)=0x1}) close(r0) 08:05:06 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) fcntl$notify(r0, 0x402, 0x11) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in6=@empty}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xff11) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:06 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, r2, 0xa00, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) 08:05:06 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x648000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xff, 0x2000) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) bind$vsock_dgram(r3, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000180)={0x1, 0x3, 0xfffffffffffffe01, 0x400, 'syz1\x00', 0x422}) close(r1) io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x1, 0x91}) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x7530}, 0x4, 0x71a, 0xffffffffffffff80}, {{}, 0x12, 0x1000, 0x89}], 0x20) 08:05:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10201, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$tipc2(0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000000c0)={0x3, 0x7fffffff}) 08:05:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001280)='/dev/dlm-control\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000012c0)={0x0, 0x9}, &(0x7f0000001300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001340)={0x9e, 0x6, 0x203, 0x800, 0x7, 0x2, 0xaa5c, 0x0, r2}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r4, 0x0, 0x800000bf) 08:05:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:07 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:07 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x645, 0xffffffffc349d434, 0x101, 0x20}) close(r0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0xdce) 08:05:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x2400) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x40000) syz_genetlink_get_family_id$tipc2(0x0) 08:05:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000) 08:05:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:07 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004aeb5c)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}, 0x20040090) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x3, 0x200000000000002, 0xb19}, &(0x7f00000000c0)=0x10) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xded, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) 08:05:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:07 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) eventfd(0xaba) 08:05:07 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f00000000c0)) r1 = dup3(r0, r0, 0x80000) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x80fb, 0x3}) syz_genetlink_get_family_id$tipc2(0x0) [ 1247.877783][T25464] picdev_read: 147 callbacks suppressed [ 1247.878137][T25464] kvm: pic: non byte read [ 1247.935033][T25464] kvm: pic: non byte read 08:05:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 1247.966296][T25464] kvm: pic: non byte read [ 1247.981452][T25464] kvm: pic: non byte read [ 1248.000404][T25464] kvm: pic: non byte read 08:05:07 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x40010000, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xfffffffffffffffd, 0xe53, 0x0, 0x100000000, 0x2}) [ 1248.034049][T25464] kvm: pic: non byte read 08:05:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1248.068153][T25464] kvm: pic: non byte read [ 1248.095606][T25464] kvm: pic: non byte read [ 1248.114146][T25464] kvm: pic: non byte read 08:05:07 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10202, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) close(r0) 08:05:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r0, 0x40, &(0x7f0000000080)="2b133e55eaa3a9565e72") r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x4) syz_genetlink_get_family_id$tipc2(0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) [ 1248.151304][T25464] kvm: pic: non byte read 08:05:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 08:05:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:08 executing program 2: r0 = socket(0x1f, 0x5, 0x4000000006) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:08 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x10001) 08:05:08 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80, 0x10000) ioctl$KDADDIO(r0, 0x4b34, 0x8001) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:08 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x91d, 0x80100) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 08:05:08 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xb6, "d40ba91b0bd1f7f317bef0a29d3b6b2baadbdeabb649990d15a7c513acb091df89652402604f215831dacd139ad33fb0224e1bf1f52ffd5b068d1b55e29bf807e20fa99c131347575360435518bb673dac5257ac5fdc6d685c53c03bf5d2b0bea33e2777786f228a7a7e2020ac20c78ccbff4b1412a15213289ad99408b03128154fc8dd4a14d3355c2f46a4d45d40c6c9d1d3cfa10ef459c77e06d9dddd691a601ee8c6a735bee1ae137c19af30e98a40f938861242"}, &(0x7f0000000100)=0xbe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x7ff, 0x2}, &(0x7f0000000180)=0x8) r2 = syz_open_dev$rtc(&(0x7f00000001c0)='/dev/rtc#\x00', 0x8e, 0x40000) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000200)) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x8db4, 0x400, 0x6f, 0xaed, 0x7, 0x1, 0x80000000, 0x4, 0x8, 0x7fffffff}) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:08 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x204000) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000140)) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x8, 0x4) 08:05:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000) 08:05:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x101000) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x7ff, 0x4, 0xfffffffffffffffe, 0x0, 0x401, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:08 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x4) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:08 executing program 5: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000040)={0x4000000000000, 0x0, 0x4d8a831124b9ce1c, 0xff50}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0086438, &(0x7f0000000080)={0xffffffffffffff71, r2}) 08:05:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x100, 0x400080) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f0000000140)={0xfffffffffffffc00, 0x8, 0x9, 0xc03, 0x2, 0x80000001}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x85b0, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) bind(r3, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'hwsim0\x00'}}, 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000) 08:05:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl(r1, 0x8, &(0x7f0000000100)="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") r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000200)=""/190) sendfile(r1, r0, &(0x7f0000000000), 0x10001) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r3, 0x0, 0x800000bf) 08:05:09 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r1, 0x0, 0xfffffedc, 0x100, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:09 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2080, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffff, 0xa200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 08:05:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:09 executing program 1: io_setup(0x2, &(0x7f0000000280)=0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/btrfs-control\x00', 0x40, 0x0) io_cancel(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xb, 0x1, r1, &(0x7f00000005c0)="6e1d0b1763533b58389a7ccd831aea1b5a", 0x11, 0xff, 0x0, 0x0, r2}, &(0x7f0000000680)) r3 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0xc0f85403, &(0x7f0000000300)=0x1) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x4044) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000000)=""/210) r5 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x4) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0x2004009}, 0xc) 08:05:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:09 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xfff, [0x9, 0xa4, 0x100000000, 0x0, 0x3, 0x6, 0x9, 0xac7, 0x7f, 0x401, 0x353a, 0x80000000, 0x9, 0x9, 0x8, 0x4, 0x1, 0x5, 0x8, 0x7ff, 0x800, 0x3, 0x1, 0x47, 0x54, 0x0, 0x1, 0xfffffffffffffff9, 0x4c, 0x2, 0xffffffff, 0x2, 0x101, 0x0, 0x5, 0x8, 0x8, 0x8, 0x9852, 0x7, 0x4, 0xb929, 0x2, 0xffffffffffff812c, 0x28c9, 0x4, 0x8, 0x8001], 0x5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xc3}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:09 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getscheduler(r2) 08:05:09 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x200, &(0x7f0000000040)=0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/130, 0x82}], 0x1, &(0x7f0000000180)=""/15, 0xf}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 08:05:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000080)={0x9e0000, 0x1000, 0x100, [], &(0x7f0000000040)={0x990906, 0xfffffffffffffff9, [], @ptr=0x7}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0xfffffffffffffffd, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000000)=0x8) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") sendfile(r1, r2, 0x0, 0x800000bf) 08:05:09 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x12a, 0x0, 0x142, 0x0, 0xffffffffffffffa9}, 0x3) recvmmsg(r0, 0x0, 0x4f, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x15e, &(0x7f0000000d00)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1, &(0x7f0000000e00)=""/4096, 0x1000}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:05:09 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) 08:05:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rfcomm\x00') setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000040)=0x8, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000000c0)) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x8) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000080)) 08:05:09 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/250, 0xfa}, {&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000280)=""/46, 0x2e}], 0x5, &(0x7f00000003c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/118, 0x76}, &(0x7f0000000380), 0x44}}], 0x40, 0x1}, 0x4000) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gre0\x00', 0xcf3f}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/90, &(0x7f0000000140)=0x5a) 08:05:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 08:05:10 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0x7, &(0x7f0000000040)={0x7, 0x400}, &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:10 executing program 5: close(0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 08:05:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80, 0x80800) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x200}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x800, &(0x7f0000000140)=0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001480)='/dev/btrfs-control\x00', 0x2, 0x0) connect$rxrpc(r3, &(0x7f0000001440)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @mcast1, 0x4}}, 0x24) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x100, r1, &(0x7f0000000200)="f662709a540047b8a852e4060bdde3590f13be7fd26b67ee74949e7267386f2197579ef55ef645fee4914e0f4b74ae8cb9fa16b7ce7a58e4fb9e4bb084a7edc1b49b81036cf2da61fca560aa7e0f2dec682c367c111a43041d9094e02cecda6565d2b8fc8407598ea79e0770596c9be6ea91c0981e0d56d36c8d99968897e7e2bffd", 0x82, 0x2, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f00000002c0)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000340)={0x1000, 0x8001, 0x5, "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"}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) ioctl$TUNGETFILTER(r3, 0x800854db, &(0x7f00000014c0)=""/87) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000040)={0x7}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001380)=""/20, &(0x7f00000013c0)=0x14) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000001400)=0x0) sched_getparam(r5, &(0x7f0000001540)) syz_genetlink_get_family_id$tipc2(0x0) 08:05:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:10 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x101) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r1, 0xc00, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x42, 0x0) syncfs(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x800000bf) fsetxattr$security_selinux(r1, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:usbmon_device_t:s0\x00', 0x25, 0x2) 08:05:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 08:05:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000080)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x20) recvmsg$kcm(r1, &(0x7f0000003280)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x4, &(0x7f0000003200)=""/65, 0x41}, 0x10042) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000032c0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000033c0)=0xe8) bind$xdp(r1, &(0x7f0000003400)={0x2c, 0x5, r2, 0x26}, 0x10) 08:05:10 executing program 2: r0 = socket(0x40000000000001e, 0x400a, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xda) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0xf, 0x103, 0x3, {0x7fff, 0x1, 0x3, 0x3}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x57}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x82000, 0x0) sendfile(r0, r3, 0x0, 0x800000bf) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/138, 0x8a) 08:05:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) 08:05:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet(0x2, 0x4, 0x9) utime(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x3, 0x8}) syslog(0x1, &(0x7f0000000340)=""/135, 0x87) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='keyring\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="4f32462643e94eef45c791562d5b8ac1e179e8da8cb06c0f474384dd0d4cdd43d7421a5650a7b08cecf65f5caaca85fdbea1b6b2533585850c18e36876e0cb6c31407aa6a87005f8fa135885a2d6f9bb1cfb8298bb0f1ffeb58032b5c697", 0x5e, 0xfffffffffffffffc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) connect$rds(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) keyctl$negate(0xd, r1, 0x0, r2) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:11 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x80000001, 0x6, 0x8, 0x7, 0x2}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 08:05:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) 08:05:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000000, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 08:05:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000180)=0x400020001) syz_genetlink_get_family_id$tipc2(0x0) 08:05:11 executing program 2: r0 = socket(0x40000000000001e, 0x4, 0xfffffffffffffffe) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:11 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000300)=0x468bcaf2, &(0x7f0000000380)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x8000) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x4e20, @loopback}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @dev}, &(0x7f0000000080)=0xc) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000180)={0xfffffffffffffff8, "d0a84cdb0e065fa1591c5a34dd3a52cd372c0313142c88869b331f4c8a85db26", 0x2, 0x1}) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0\x00') r2 = socket$unix(0x1, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r2, r1, 0x0, 0x401) 08:05:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x6402, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x2, 0x4) 08:05:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1300000000000000) 08:05:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8000000000, 0x0, 0x0, 0xffffffffffdf0001, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') sendfile(r0, r0, 0x0, 0x800000bf) 08:05:11 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r0) close(r0) 08:05:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x44005}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x7, 0x1, 0x95, 'queue0\x00', 0x8000}) 08:05:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:12 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x6a856e31fee42a07, @dev={0xac, 0x14, 0x14, 0x1}, 0x4e24, 0x0, 'wrr\x00', 0x4, 0x200, 0x80}, {@rand_addr=0x8000, 0x4e20, 0x2000, 0x3, 0x2, 0x401}}, 0x44) r1 = socket(0x40000000000001e, 0x800000080805, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x5, 0x4) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) bind$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000240)='mime_type\x00') ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0x6, @capture={0x1000, 0x1, {}, 0x6}}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x43}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000e00)={'filter\x00', 0x1000, "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"}, &(0x7f00000002c0)=0x1024) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x290802, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 08:05:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) 08:05:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) get_thread_area(&(0x7f0000000000)={0x6, 0x100000, 0x6400, 0x40, 0x9, 0x7e, 0x7, 0x5, 0x100000001, 0xff}) [ 1252.657634][T31972] IPVS: set_ctl: invalid protocol: 10759 172.20.20.1:20004 08:05:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x19a0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) syz_extract_tcp_res(&(0x7f00000000c0), 0x7fff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) 08:05:12 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r1, 0x4b36) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x8, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000) 08:05:12 executing program 5: close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10001, 0x10000) 08:05:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x28, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2, 0x7}, &(0x7f0000000180)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) 08:05:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:12 executing program 2: r0 = socket(0x40000000000001e, 0xa, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:12 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x3}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x2883, 0xfffffffffffffffe, 0x7, 0x401, 0x13}, 0x98) 08:05:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000) 08:05:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=""/65, &(0x7f0000000280)=""/203, &(0x7f0000000080), 0x10000}) ftruncate(r0, 0x5) 08:05:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:13 executing program 1: syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 08:05:13 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x5) sendfile(r1, r2, 0x0, 0x800000bf) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000040)=0x87) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, 0xbc, "2a5f3fbc3092d8a84a1d56f57c5f05d7fcf6322a64df729a3027787caba85e44462e7190a652f4dbb7ba60829b42499facec9e9ed764bbd91882f84d4b5438361b94f54996a35924547d4674821e84265d7ecdfdbf7aa30578161b0d7fc20dede7f989e2d1a3746c22ed2208e7102a6d0a8f2dc4ca6af1646047394eba96fd19b7c6b86ecf794a6478e8f677b95ff0330bdd6304915b619969449327091d6c68117bbbe3ae1c3b89a88182321fe9b6e1b7671fb93b1d80cc6cc8a1b9"}, 0xc2) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x9be) 08:05:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:13 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000e00)={0x6, {{0xa, 0x4e22, 0x100000001, @loopback, 0x8}}, 0x1, 0x9, [{{0xa, 0x4e22, 0x8, @mcast1, 0x3}}, {{0xa, 0x4e22, 0x400, @mcast2, 0x3f}}, {{0xa, 0x4e20, 0x2, @local, 0x7}}, {{0xa, 0x4e20, 0xfffffffffffffffd, @empty, 0x1}}, {{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {{0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, {{0xa, 0x4e22, 0xffffffffffff0a02, @empty, 0x8}}, {{0xa, 0x4e20, 0x100000000, @loopback, 0x6}}, {{0xa, 0x4e23, 0x9, @local, 0x5f}}]}, 0x50c) lgetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=""/91, 0x5b) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="5efe52ce7096b502d5040f7c022b3392ed25e5b455dbd5ab7b76606d922a6deff02d6a0f0aa7b0957916fb65d1556fdef6b9133fd9381ccdf43b10", 0x3b}, {&(0x7f00000000c0)="4ba40d4e91c189937607d98dbd543283f61ea7ecf6fdaa0c8321c83e60937d863f0d", 0x22}, {&(0x7f0000000100)="8cb5a4b98274862cdbbca836f406a4174c3ecf9e98421bc2a6ec4af47ac0a52e37e45f7636f51d9aa3376751f1f6a90930df0289c7c712fee8e2eacc9b3b9ad4888fbd29ec9b12eb96515428a5bfb0aa2935e35c2c988f3dfbccc1eeb5bd1eb0175baf4e0d79c0aee4301d48432da6e85f3e534bd449e6dfe5535adb35b11c787bd81ae8d8e533cb4219588ac92816f74a092bba674f6f322c4a5f0cd85d9c25038248e1a40cb9c8824a61244570a3c4c7e097b4d0c5719feaeedc6afdd60fcb7b8f230f9394d8fa11b7e0b54f44f0f09d0becd4b4b6800b62", 0xd9}], 0x3, &(0x7f0000000240)=[{0xdc, 0x118, 0x4, "4fb2b5614345e9becd0aa7a6669574a12cf886444d5959e077ec3ae30336fd5cb94d75fe8a7d78feb2cce0782ea34357986fd9dce9a0b441149168106e3c4c58782dde3aa208ebfdd71802d125ed9d57e384e90088237f31d4891180d761f424f7ce62d13b2553029bb54e724e45e2a5e288788437f542eaf2d7311d8219b071d0734523ec88085bfc7c64b4a51f280f9d9c92a89336b9ec46d5c61b2892d11040c0387cc0e41d1a42fd5c3bc764ec7fc401a198ae63eb0e5aeeaebc3781be244a05c29ce5e004fe74e9d99538f6"}, {0x74, 0x19f, 0x0, "8f2a6cfb8c0bcf6f084b6434a8ed169899abe3bfa32c545657835b16359dd5c16e308a1cf21db328235961735dad208de2a2a0484d4bde8048bc20d8183d1c9849a53b74886f80ec47065ca18fbed8e278d319ba0729f76d682b1ddceb20de39bd6d94d5aa"}, {0x18, 0x111, 0x26, "4193894f395dedacf9"}], 0x168}, 0x40050) 08:05:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 08:05:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') chdir(&(0x7f0000000000)='./file0\x00') r2 = semget$private(0x0, 0x1, 0x1) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000040)=""/68) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:13 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x80600) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 08:05:13 executing program 5: syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 08:05:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000) 08:05:13 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40007d, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000040)={0x80000000000000, 0x10002, 0x3a414b04, 0x4, 0xc}) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/60, 0xfffffffffffffc39}, {&(0x7f0000000100)=""/79, 0xfffffe1c}, {&(0x7f0000000180)=""/96, 0x60}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000340)=""/17, 0x11}], 0x5, &(0x7f0000003300)=""/4096, 0xffffffffffffff16}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, 0x4, {0x7, 0x1d, 0x3, 0x4, 0x2, 0x2, 0x3, 0x8001}}, 0x50) 08:05:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:13 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e, 0x2013, r0, 0x0) 08:05:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x10040) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48) write$P9_RCREATE(r0, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x2, 0x4, 0x5}, 0x7}}, 0x18) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x140) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) sched_getattr(r2, &(0x7f0000000040), 0x30, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:13 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xfffffffffffffff5, 0x8}, 0x10) 08:05:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 08:05:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e, 0x2013, r0, 0x4000) 08:05:14 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) fadvise64(r0, 0x0, 0x5, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x27, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80200, 0x0) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/bnep\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 08:05:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000100)={0x2, 0x0, 0x2011, 0x800, 0xf5, {0x0, 0xffffffffffffffff}}) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000040)=0x5) syz_genetlink_get_family_id$tipc2(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000140)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2ee6c3bc, 0x482) 08:05:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0x0, 0x2}, 0x20) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 08:05:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1900000000000000) 08:05:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:14 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:14 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0xfffffffffffffff8, 0x2}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r2, 0x100000001}, 0x8) 08:05:14 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xff, 0x101000) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x143800) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x5}, 0xf) 08:05:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) 08:05:14 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffa, 0x210000) syz_genetlink_get_family_id$tipc2(0x0) 08:05:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8140, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x4, 0xffffffff80000001, 0x8000, 0xfffffffffffffffc, 0x3, 0x1000, 0x4, 0x8]}) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ptrace$cont(0x18, r3, 0x2, 0x7f) r4 = socket$inet6(0xa, 0x200000000003, 0x1ffffffff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) r5 = socket$netlink(0x10, 0x3, 0x400000000000006) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r8 = memfd_create(&(0x7f00000001c0)='/delo\xff\a\x00\x00\x00\x00', 0x0) pwritev(r8, &(0x7f0000000480)=[{&(0x7f00000004c0)='+', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r6, r7, 0x0, 0x2000006) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') memfd_create(&(0x7f0000001540)='Q\x00', 0x2) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r2, r9, 0x0, 0x800000bf) [ 1255.550669][ T3410] picdev_read: 374 callbacks suppressed [ 1255.564662][ T3410] kvm: pic: non byte read [ 1255.577595][ T3410] kvm: pic: non byte read [ 1255.613045][ T3410] kvm: pic: non byte read [ 1255.634410][ T3410] kvm: pic: non byte read 08:05:15 executing program 5: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) ftruncate(r0, 0x200000000000014) 08:05:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:15 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3cdb30a8, 0x290500) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000180)) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffffffffffffff9, 0x40, 0x5, 0x80000000, 0x18}, 0x98) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc02410}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4b}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 08:05:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x9}) [ 1255.656679][ T3410] kvm: pic: non byte read [ 1255.678758][ T3410] kvm: pic: non byte read 08:05:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1255.727806][ T3410] kvm: pic: non byte read 08:05:15 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 1255.799172][ T3410] kvm: pic: non byte read [ 1255.813668][ T3410] kvm: pic: non byte read [ 1255.840979][ T3410] kvm: pic: non byte read 08:05:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r0, 0x0, 0x80800000a2) 08:05:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x2, 0x80000001, 0xf4}) 08:05:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) 08:05:15 executing program 2: r0 = socket(0x800000000000008, 0x7f8, 0x4000000d2) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/35, 0x23, 0x10000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) shutdown(r0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:15 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) 08:05:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') clock_gettime(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000100)={{0x6, 0x6, 0x1, 0xffffffffffff8001, 'syz0\x00', 0x5}, 0x1, [0x4, 0x800, 0x2, 0xfffffffffffffffa, 0x7, 0x3, 0x7, 0x9, 0x100, 0x29, 0x6, 0x401, 0x0, 0x9, 0x4, 0x8000, 0xd5bc, 0x8, 0x0, 0xfffffffffffffffe, 0x800, 0x17d, 0xb7, 0x2, 0x1fe0, 0xffffffffffffff33, 0x137, 0x9, 0x3f, 0xffff, 0x1f, 0x2, 0x0, 0x3, 0x80, 0x5, 0x4, 0x0, 0x7, 0x3, 0x340c, 0x401, 0x1, 0x400, 0x0, 0x8, 0x0, 0xd6, 0x9, 0x1128, 0x2, 0x3, 0x0, 0x3, 0x100000000, 0x0, 0x9, 0x6, 0x5, 0x1, 0xffffffff, 0xfbc1, 0x3, 0x4, 0xf123, 0x1, 0x8, 0x6, 0x81, 0x6b3, 0x49, 0x3, 0x7, 0x100, 0x1, 0x6, 0x877a, 0x8, 0x200, 0x5, 0x4, 0x3f, 0x3, 0x6, 0x7, 0x0, 0x3e, 0x0, 0x3, 0x1, 0x2, 0x5, 0x400, 0x7, 0x101, 0x4, 0x9, 0x7fffffff, 0x4, 0x8000, 0xb, 0x5af5, 0x10000, 0x4, 0x0, 0x462, 0x3, 0xa5, 0x6, 0x6, 0xa42c, 0x1, 0x8, 0xc5f9, 0x100000001, 0x10000, 0x8, 0x3, 0x8, 0x7f, 0x6, 0x8000, 0x100, 0x80000001, 0x1, 0xfff, 0x9, 0x8000], {r2, r3+30000000}}) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x4000000000007, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:16 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 08:05:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) 08:05:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:16 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x80) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000180)={0x6, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}]}) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x10140) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:16 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000780)) ftruncate(r1, 0x7) write$binfmt_elf64(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0xcc, 0x804, 0x1ff, 0x3, 0x3e, 0x0, 0x33e, 0x40, 0x380, 0x8, 0x4, 0x38, 0x1, 0x3ff, 0x0, 0x401}, [{0x6474e557, 0x9, 0x631b, 0x0, 0x80000000, 0x80000001, 0x2af, 0x8001}], "70c6b369dbade5883baeb74a1e9ff920b88c9281cffe1c6da55053a6d74a930c6812b48d0d33a25b9af3e1a5aa94b87563cb9aec9679bb8b1ac5f5ddea079c62bc1ed9e9c8ebcf054c8dd86bd486ce3be5f38b675ec0f67311e7daabbc6677189ef5d9e22e90b76ce83a7ee8068dca5398be449030977f7fdb9905a0cb3fa1950ab54230b5bd9ee48e259737a90014b3b0117da261597e10a32740f01bc10973e94f6ba90d5717f1bd84c09886c3742392618bac1729dc91459d4516d2c08c0e65f60527109b91b1756e359f0d91a4de1aad725a82e7", [[], [], [], [], []]}, 0x64e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={r4, 0x80000, r0}) sendfile(r2, r3, 0x0, 0x800000bf) prctl$PR_SET_PDEATHSIG(0x1, 0x1f) 08:05:16 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000) 08:05:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:16 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = socket(0x0, 0x0, 0xff) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'veth0_to_bond\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x68, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x89, @remote, 0x8}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000001c0)=0xc) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/mcfilter\x00') ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x8, 0x0, [{0x3, 0x4, 0x0, 0x0, @sint={0xd3, 0x32}}, {0x7, 0x0, 0x0, 0x0, @irqchip={0x1, 0x7fff}}, {0x3, 0x3, 0x0, 0x0, @irqchip={0x800000000, 0x5}}, {0x5, 0x3, 0x0, 0x0, @irqchip={0x82, 0x3}}, {0x0, 0x0, 0x0, 0x0, @irqchip={0xe8, 0x4}}, {0x4, 0x4, 0x0, 0x0, @sint={0x200, 0x5}}, {0x4, 0x2, 0x0, 0x0, @msi={0x8, 0x1, 0x3}}, {0x5, 0x2, 0x0, 0x0, @adapter={0x3, 0x0, 0xfffffffffffffffc, 0xb07e, 0x6}}]}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x600, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0x6, &(0x7f0000000080)=""/6}]}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x141) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r3, 0x0, 0x800000bf) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000140)=0x1ff) [ 1257.300194][ T5680] QAT: Invalid ioctl 08:05:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:17 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x5) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) 08:05:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x66, "936aa6c6bfd017b94b7a09c6425a471027feff6fb53e32a50ec22fb73b0b6e6d099bddc145afd64c2bbb673b95c9cdc0a8e1c932774975e020510df3be5573afd77885f107b653b81772609ed65b766eec398d1ac830088692f01455297be88b75d784855dd0"}, &(0x7f0000000100)=0x8a) 08:05:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) 08:05:17 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:05:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:17 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:05:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x802, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendfile(r1, r1, 0x0, 0x800000bf) 08:05:17 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r1, r2, r3}, 0xc) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:17 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x2, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) bind$packet(r0, &(0x7f0000000540)={0x11, 0xff, r1, 0x1, 0x5, 0x6, @local}, 0x14) r2 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f00000005c0)={0xfffffffffffffff7, 0xa, 0x4, 0x40, {r3, r4/1000+10000}, {0x2, 0x2, 0x3, 0x2, 0x1, 0x5, "c8d1c0f5"}, 0x3ff, 0x0, @userptr=0x100, 0x4}) r5 = socket(0x11, 0x2, 0x10001) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x80000001, 0x0, @mcast2}}, [0x81, 0x4, 0x4, 0x3, 0x0, 0x8, 0x1, 0x100, 0x7a9b, 0x4, 0x5, 0xffffffff00000001, 0xffff, 0x1, 0x80000001]}, &(0x7f0000000100)=0x100) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="fc002abd7000fbdbdf25f2ad3300e8e3254daf87e2020000000c00060002000000000000000c000200ff070000000000000c000200ff03000000000000bf1956219f865c5e33f0d92f8293eecb20e11bedb6d97053459e9555d18f027aaff08ca454db16b5ec628db53bee85be71ebe32c12977c662549ede3738642d030e2ec8ebaba94e909b46790b26b34f4d3f686234091fd0f30c6a2fd17f8c46f9134f2714a63b1cd6e597ca651d8b8c5591b0a0056f61fb6995090fb10c3efa1c499af9ee0e1a782c241ba7d"], 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8040) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={r6, 0xe8, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x7ecd, @rand_addr="103c83cec7bbc095fc7251552374312e", 0x2}, @in6={0xa, 0x4e20, 0x7f, @rand_addr="2845fa782cbc2c3ef9ddb678bc9ce366", 0x6}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x341}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x7, @ipv4={[], [], @broadcast}, 0x747a}]}, &(0x7f0000000180)=0xc) sysfs$3(0x3) 08:05:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:17 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:05:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 08:05:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:17 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000100)=""/244, 0xf4}, {&(0x7f0000000040)=""/41, 0x29}], 0x3, 0x0) sendfile(r1, r2, 0x0, 0x800000bf) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) 08:05:17 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x12002, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x80000001}, 0x8) r1 = socket(0x40000000000001e, 0x800000080805, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000dc0)={0x42, 0x3, 0x2}, 0x3ab) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x8, @remote, 0x75ad}, {0xa, 0x4e20, 0x7, @rand_addr="4c9cec77b6402cd3eacb0dbc94a3054e", 0x9}, 0x1, [0x3, 0xdbcf, 0x6, 0x100, 0x3, 0x5e5, 0x4, 0x7ff]}, 0x5c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0)) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/220) 08:05:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000) 08:05:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:18 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:18 executing program 1: setitimer(0x1, &(0x7f0000000000)={{0x0, 0x7530}, {0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0xf, 0x4}, &(0x7f00000000c0)=0x0) timer_getoverrun(r0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc2(0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 08:05:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) fcntl$getown(r0, 0x9) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='oom_score_adj\x00') prctl$PR_GET_THP_DISABLE(0x2a) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$EVIOCSFF(r2, 0x402c4580, &(0x7f0000000040)={0x57, 0x188, 0x1, {0x7b, 0xa24}, {0x6, 0x80}, @ramp={0x1f4, 0x3, {0x2b1, 0x80000000, 0x0, 0x3}}}) sendfile(r0, r2, 0x0, 0x800000bf) 08:05:18 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40, 0x0, 0x400000000000}, 0x9d) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x3800000000000000) 08:05:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 08:05:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r0, 0x0, 0x8) 08:05:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:18 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x92f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0xaf5b, @mcast2, 0xffffffffffffffc0}}, 0xa, 0x2, 0xfffffffffffffacc, 0x3, 0x10000000000}, &(0x7f0000000140)=0x98) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)) 08:05:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:18 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x321102, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1a0, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4259}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa263}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ef}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5b61}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xab}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 08:05:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:19 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x583ffd2a11a303e3, 0x800, 0x4, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x55}, 0x8) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)={0x1f}) 08:05:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000000)=0x8000000000000001) syz_genetlink_get_family_id$tipc2(0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000440)=""/68, 0x44}], 0x7, 0x0) 08:05:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x90d7, &(0x7f0000000040)=0x2) 08:05:19 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x400000000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, [], 0x1a}, 0x7ff}}}, 0x84) 08:05:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x440400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x9, 0x1ff}, &(0x7f0000000140)=0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) fdatasync(r3) 08:05:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x9, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@initdev, @rand_addr, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r2}, 0x14) 08:05:19 executing program 2: 08:05:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 08:05:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x4100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) 08:05:19 executing program 2: 08:05:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:20 executing program 2: 08:05:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3ff) 08:05:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) inotify_init1(0x80800) 08:05:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:20 executing program 2: 08:05:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x4800000000000000) 08:05:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:20 executing program 2: 08:05:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x16, 0x3) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x28200, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 08:05:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:20 executing program 2: 08:05:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x4c00000000000000) 08:05:20 executing program 2: 08:05:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x0, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000200)=0x5) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setfsgid(r1) syz_genetlink_get_family_id$tipc2(0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) renameat(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') 08:05:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:20 executing program 2: [ 1261.295007][ T9912] picdev_read: 374 callbacks suppressed [ 1261.295067][ T9912] kvm: pic: non byte read 08:05:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x0, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)) r3 = syz_open_procfs(r1, &(0x7f0000000040)='net/sockstat\x00') sendfile(r0, r3, 0x0, 0x800000bf) [ 1261.347850][ T9912] kvm: pic: non byte read [ 1261.400175][ T9912] kvm: pic: non byte read 08:05:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x200) ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f0000000280)=0x6) mq_timedreceive(r1, &(0x7f0000000200)=""/74, 0x4a, 0x100000000, &(0x7f0000000180)={0x0, 0x989680}) write$P9_RWSTAT(r1, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) [ 1261.463002][ T9912] kvm: pic: non byte read [ 1261.468590][ T9912] kvm: pic: non byte read [ 1261.499974][ T9912] kvm: pic: non byte read [ 1261.505658][ T9912] kvm: pic: non byte read [ 1261.511784][ T9912] kvm: pic: non byte read [ 1261.518825][ T9912] kvm: pic: non byte read [ 1261.533375][ T9912] kvm: pic: non byte read 08:05:21 executing program 2: 08:05:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x0, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x3b, @remote, 0x4e22, 0x1, 'wlc\x00', 0x2, 0x4, 0x3e}, 0x2c) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:21 executing program 2: 08:05:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x0, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000) 08:05:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x41c0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(0x0) r1 = gettid() sched_getscheduler(r1) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) 08:05:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read$rfkill(r1, &(0x7f0000000000), 0x2) 08:05:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x0, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x42000, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x4001, 0x3, 0x4, 0x800}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:21 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x282, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0xdc000}, 0x8) r2 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x0, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:21 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) read(r2, 0x0, 0xfe85) tkill(r0, 0x1004000000016) 08:05:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 08:05:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6018230000000000) 08:05:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r1, 0x7, 0x101, r1}) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 08:05:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 08:05:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000180)='y\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffecd, &(0x7f00000000c0)=0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x805) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f0000000440)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846eab1a9d914b0695b16dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1a375b63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c128cf35ddf4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7912ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd24000000000000000ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6692ceb4831b5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8297cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057288d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858ae38ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d294285497a42736454ccb62fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0xfdb4) close(0xffffffffffffffff) 08:05:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = geteuid() getgroups(0x2, &(0x7f0000000400)=[0xee01, 0xee01]) fchown(r0, r1, r2) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x200000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) getsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x2044004, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@subj_type={'subj_type', 0x3d, 'encrypted\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/timer\x00'}}]}}) write$P9_ROPEN(r3, &(0x7f0000000440)={0x18, 0x71, 0x2, {{0x1, 0x0, 0x5}, 0x5}}, 0x18) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)="4ad50c4cf3d499bcda4b024844a56d3b017795be70d4b905279a44f637447e4c18c3609cc1ab7feaa3092cff4ece05e6509436a8c513899a8d39472de0b0b95bf02362da8847018101a2ffe643db0919bb40fab7febaea7e589bff27357cdca64acafb32965cce685d7e1353fdb9a76946b1bc42f1c561bec227", 0x7a, 0xfffffffffffffff9) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="cf7b0077fa15c15db0adf860152aeb7c425fbd3d6d817d2dd396e828f360164ef81e2bf2683a5352c74af9f30d748847ca5c9a021556c248e6a4bfe6763a58dcb803f1fbd281a5fb566949e25f41840ee6a28969488898a0b47e7886bf73ec0f8f68abfd78247494519b13d1efa7d46751e8ddf6365b57799abf4049fd9739989a12caa4e7b88639e4d638134acbd8a4", 0x90, r5) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000002c0)=0x3) syz_genetlink_get_family_id$tipc2(0x0) 08:05:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:05:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x60d4eb10b97f0000) 08:05:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:05:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:22 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f000010ef70)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2}}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 08:05:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x3}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:05:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:23 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x84800, 0xffffffffffffff9c}) 08:05:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x16, 0x3) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x28200, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6300000000000000) 08:05:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') r3 = getpid() ioctl$VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f0000000100)={0x4, @raw_data="e66ca8a9ad6dbdc067b8b0e92ce6d70702d4dcd2118692579958b73294eb1aca03ddb1df7ea460cc71f81b3cbddbe3ea371541a0669a3dafe1dccca88f274c62538599f259bdf16cb854c2fb4da93d2e7bdb731931bbcb634b902c54e93e53f366441eb7913194a063e8e238cff1ee0b4f64c0751635e8f77b1ecf750cb1593974e268ff7f5a290f8e2017a4c00e2b74d8757390171fa41e873a115632994a6600996e91efefae6126f5a9d725528e113bc01daef41addb6eeb127347764eaedde0514ae14a1850e"}) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r3}) sendfile(r1, r0, 0x0, 0x800000bf) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000080)=0x24) 08:05:23 executing program 1: syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x210002, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(0x0) 08:05:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x16, 0x3) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x28200, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:23 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x440400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x9, 0x1ff}, &(0x7f0000000140)=0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) fdatasync(r3) 08:05:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x90d7, &(0x7f0000000040)=0x2) 08:05:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0084320, &(0x7f0000000140)={0x9, &(0x7f0000000040)="0d5315fc6373e47620aafb6d293eb835bc14b4d46a9da2aabd280eec129de60dbd4fd1ac8c70198c07a90e595fc257dc89ee349ddb946f37826296a9e5257397a861ef6c7b1ed119537f13d10ea4cf4bb47a5eae23ca96e4050cebbc0abeabebbc69964c092db39535ed8aaf9ff0b0f36e7ad30b1a36807da7123e89afbba310dff2e1bb7070f0f1b6b196312b8d94ad4159b7c4d83f25481fc6d7b392faef0b158d2ac6dcbd4cd332c3d3693b15264ddb4db9ade7fd3daaafc1c6a0247d9a744eec9b958a306804b29abfa9707445cb51b7f6a64714647f17002883b6690b0e5b"}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:23 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x363edb566fa4db59) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x72}, &(0x7f0000000180)=0xfffffffffffffdf6) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r2, r3, 0x0, 0x800000bf) 08:05:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6504460800000000) 08:05:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) sched_getattr(r2, &(0x7f0000000040), 0x30, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:23 executing program 5: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000e00)={0x6, {{0xa, 0x4e22, 0x100000001, @loopback, 0x8}}, 0x1, 0x9, [{{0xa, 0x4e22, 0x8, @mcast1, 0x3}}, {{0xa, 0x4e22, 0x400, @mcast2, 0x3f}}, {{0xa, 0x4e20, 0x2, @local, 0x7}}, {{0xa, 0x4e20, 0xfffffffffffffffd, @empty, 0x1}}, {{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {{0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, {{0xa, 0x4e22, 0xffffffffffff0a02, @empty, 0x8}}, {{0xa, 0x4e20, 0x100000000, @loopback, 0x6}}, {{0xa, 0x4e23, 0x9, @local, 0x5f}}]}, 0x50c) lgetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="627472e6732673656c696e757800ea488e09246fec21b1f38c931a316de003c8002ab448141c561e2c3840c90fe428af954f05251db15a98223fa81b678c7f58b41686ecf8f1508792b097f2edd709aabf0518e39f938d56b388008f5ed495c11c240135448704f271bb3ec3efe7c3061810b993ddd721ae760a524ee6e7052025c4e00dc3d5ee7dcc7626d8fbb71d7f6e7aa52060573c10dd62b767522a8c86bf7f65f5a68ec59a9b6a2292ae6f24f1eb81e7b9aff2ec5ebb45256364da7ec357d1d730b3ce6b7750cd2b72e8df46b1581bbae8d8f492f03d79f624edcf2c8755a7121531905859f349ea927f46ac7904f40f3f21d93de52676de5fb81357ae89f289b73d0ad857ec5dd078e627aaee71a7595f60c605ec4dd5e1affedaf61a92ab39792a206acdbc3958dedbe003fbda36b27439a21638c8ed8f16"], &(0x7f0000000480)=""/91, 0x5b) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="5efe52ce7096b502d5040f7c022b3392ed25e5b455dbd5ab7b76606d922a6deff02d6a0f0aa7b0957916fb65d1556fdef6b9133fd9381ccdf43b10", 0x3b}, {&(0x7f00000000c0)="4ba40d4e91c189937607d98dbd543283f61ea7ecf6fdaa0c8321c83e60937d863f0d", 0x22}, {&(0x7f0000000100)="8cb5a4b98274862cdbbca836f406a4174c3ecf9e98421bc2a6ec4af47ac0a52e37e45f7636f51d9aa3376751f1f6a90930df0289c7c712fee8e2eacc9b3b9ad4888fbd29ec9b12eb96515428a5bfb0aa2935e35c2c988f3dfbccc1eeb5bd1eb0175baf4e0d79c0aee4301d48432da6e85f3e534bd449e6dfe5535adb35b11c787bd81ae8d8e533cb4219588ac92816f74a092bba674f6f322c4a5f0cd85d9c25038248e1a40cb9c8824a61244570a3c4c7e097b4d0c5719feaeedc6afdd60fcb7b8f230f9394d8fa11b7e0b54f44f0f09d0becd4b4b6800b62", 0xd9}], 0x3, &(0x7f0000000240)=[{0xdc, 0x118, 0x4, "4fb2b5614345e9becd0aa7a6669574a12cf886444d5959e077ec3ae30336fd5cb94d75fe8a7d78feb2cce0782ea34357986fd9dce9a0b441149168106e3c4c58782dde3aa208ebfdd71802d125ed9d57e384e90088237f31d4891180d761f424f7ce62d13b2553029bb54e724e45e2a5e288788437f542eaf2d7311d8219b071d0734523ec88085bfc7c64b4a51f280f9d9c92a89336b9ec46d5c61b2892d11040c0387cc0e41d1a42fd5c3bc764ec7fc401a198ae63eb0e5aeeaebc3781be244a05c29ce5e004fe74e9d99538f6"}, {0x74, 0x19f, 0x0, "8f2a6cfb8c0bcf6f084b6434a8ed169899abe3bfa32c545657835b16359dd5c16e308a1cf21db328235961735dad208de2a2a0484d4bde8048bc20d8183d1c9849a53b74886f80ec47065ca18fbed8e278d319ba0729f76d682b1ddceb20de39bd6d94d5aa"}, {0x18, 0x111, 0x26, "4193894f395dedacf9"}], 0x168}, 0x40050) 08:05:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='fd/3\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) sendfile(r1, r3, 0x0, 0x800000bf) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x0) 08:05:23 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x19a0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) syz_extract_tcp_res(&(0x7f00000000c0), 0x7fff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) 08:05:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6800000000000000) 08:05:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x82, 0x0) write$ppp(r1, &(0x7f0000000040)="9878329b3368ec4df80f83742c9a27d524293f62cc26edbd8937b226528f9846e4213d5c422c0e8b4f938cd8a58f20910dd63b661fbed82ad8b768a5faae7e776adc18378e02cfe8c13beefedfb31f6f064c50724de7aa4e0043a9931badfc1ffa7e85bd04d615ae441e756a597ed424a0f53b497be676fdea37e47e1ab8fa6a68a8af8037ee169273c2adb9f97eca3c061a076812d56479bf1f894b0186562a3e2ec54017d82610888478f0033c0bcdc073d582e74d826d25fe66c3258877", 0xbf) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x101000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x10901, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0xc0f85403, &(0x7f0000000240)) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r3, 0x922}, &(0x7f0000000200)=0x8) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 08:05:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r2, 0x0, 0x800020bf) 08:05:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:24 executing program 2: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 08:05:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="6c8a85dcbf47ca78ab2f3f193457b021ba34544dd42867c9daad7687b780af1924dc8d6ebbf8a3a24f043ab878b5b916cfdb1fb22b4dd0a6cca82b35f418e1ba308edea5e498e41a9fb476aa8e41397ec3a7d5bc3841661462eee406cab775b55b8d6e7ee74675cb8100d48c1ffdfec122c7e7335eae059f19cade8645159ef97ac873a26ffc3af2dcf3debaf6aa8c42b8d892c04eb99e2c6a79dc405457aa7fa273463490ff9e", 0xa7, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@secondary='builtin_and_secondary_trusted\x00') ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20800, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000340)={0x1ff, 0x1, 0x10000}) 08:05:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:24 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x100, 0x400080) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f0000000140)={0xfffffffffffffc00, 0x8, 0x9, 0xc03, 0x2, 0x80000001}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x85b0, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) bind(r3, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'hwsim0\x00'}}, 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:24 executing program 0: syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0xb0600) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6c00000000000000) 08:05:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 08:05:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @loopback}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x34, 0x52, 0x702, 0x70bd27, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x40}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2c}, @NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x40) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6800000000000000) 08:05:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000240)) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000200)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x10540) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xfffffffffffffffa) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000002004e24ac14142b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002756f87a691af36900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000002004e23e000000100"/396], 0x18c) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000280)={r3, 0x1, 0x0, 0x2000}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000080)={r5, 0x20}) syz_genetlink_get_family_id$tipc2(0x0) 08:05:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 08:05:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x7400000000000000) 08:05:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) sendfile(r0, r1, 0x0, 0x800000bf) 08:05:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6800000000000000) 08:05:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x2000) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_genetlink_get_family_id$tipc2(0x0) 08:05:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80) prctl$PR_GET_DUMPABLE(0x3) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/79, 0x4f) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000400)=""/250, &(0x7f0000000280)=0xfa) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x56, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}, 0x1c) socketpair(0x11, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(r0, 0xae9a) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @local, 0x8}, 0xfffffe10) socket$unix(0x1, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) 08:05:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x7a00000000000000) 08:05:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x6800000000000000) 08:05:26 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0xfffffffffffffe2d, 0x2}) msgget$private(0x0, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000080)={0x93, 0x10000, 0x1d, &(0x7f0000000200)="b2b3ff98d24d1e91855436fc8c1ead8d654423b7345027790c05dfbed0"}) r2 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000180)=0x7ff) ioctl$KVM_DIRTY_TLB(r1, 0x400caeaa, &(0x7f00000000c0)={0xffffffff00000000, 0xffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0xc0f85403, &(0x7f0000000300)=0x1) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) syz_genetlink_get_family_id$tipc2(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 08:05:26 executing program 0: r0 = shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x400, 0x400002) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xfff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x101, 0x9f, 0x0, 0x1, 0x3c6b}, 0x14) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000200)={0x22, "fd758b6d698aea6aebcd2f2d863ad8c9719c15b09881a8d9d25a06fc22ef7215391a"}) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/166) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r3, r4, 0x0, 0x800000bf) 08:05:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:26 executing program 5: r0 = socket(0x40000000000001e, 0x800000080805, 0x0) fcntl$notify(r0, 0x402, 0x11) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in6=@empty}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xff11) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000dc0)={0x40}, 0x10) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x0) 08:05:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) 08:05:26 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000000)=0x80000000001) syz_genetlink_get_family_id$tipc2(0x0) 08:05:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0145401, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:26 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendto(r0, &(0x7f0000000000)="e8cce2ab4eac91dc740bb6ec4b864c96fb6912e37945f9319dcd51d20c0c62882cd1924c", 0x24, 0x20000004, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000140)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth0_to_team\x00', 0xf1d}) 08:05:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x8004000000000000) 08:05:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4100) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc2(0x0) 08:05:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x1, 0x6, 0x1, 0x0, 0x0, [{r0, 0x0, 0x8001}]}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendto(r0, &(0x7f0000000000)="e8cce2ab4eac91dc740bb6ec4b864c96fb6912e37945f9319dcd51d20c0c62882cd1924c", 0x24, 0x20000004, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000140)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth0_to_team\x00', 0xf1d}) 08:05:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:27 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40080, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x8f, 0x7fffffff, 0x1, 0x6, 0x0, 0x8, 0x9d11310b05729c9a, 0xf, 0x100, 0x6, 0x3ff, 0x8, 0x401, 0x2, 0x8, 0x0, 0x8, 0x1, 0x2e, 0xfffffffffffffffd, 0x1f, 0x200, 0x4, 0x9, 0x7f, 0xfffffffffffff6c7, 0x80000000, 0x1c00000000, 0x72d00000000, 0x2, 0x1, 0x8, 0x100000000, 0x2, 0xe0, 0x7fffffff, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x4}, 0x4, 0x8, 0x2, 0x0, 0x104, 0x6, 0x100000001}, 0xffffffffffffffff, 0x7, r1, 0x3) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="4597cb413426b3c149015629ef24006950a4162749fab68a2d500c382c002688d93adb430abe9210bbcaa4fc57cce475d7265102752b0aa22992161244727f5c905575f8114078afa64b82ff724202393cd451cd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x14) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r0, r3, r3, r3, r1], 0x5) r4 = getpgrp(0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x9ee2, 0x40, 0x0, 0x7f}) r5 = syz_open_procfs(r4, &(0x7f0000000400)='uhes\x00Z\xd4\xbf\x90:_\xd4\x93\\}8}@\xae\xd0s^\xe7\x0fEQ\x04\xb9\xe9\xf6\xe0\xdec\xf4\aO\xc6\xe2\xdf\xcb\x85\xcb<\xc0`\x02\xa64\x8f\xc9\xab\x80\x90On\xa0lZ\xc2\xed\xe7\xeaA\r\xb11\x0e\"\x1b\xbd\xf8\x91[,\x13tv\x98\xe0n}\xde\x85\x01\r\xef\xc0\xeb\x84\xc6\xb8\xd4\x88\xe72R\xbfG\xb7\xfch\x9b\xf9\xf7\x8e\xdc\xaf\x00\x00\x00\x00\xda\xf8i\x96\xcd\x8d\x84Q\xd2h`\xef_\x8f*6\xc1\xfc\x19\xdea\r\x95s\xe33O\xa2D\'s\xd1\xc5\xe3\x8a\xf3\x14\xf1\xeb\x16/\xe5\b]\xdd\xca;\xb2\x93\x84\xddZy\x9b\vL\x83\x1a\xfc\x143\x06\x9du\x84v&\xdb\x89\xe8\x0f\xd3\xd2\xec\xde\xf4\x86\x18\xc2_Zs+JP\xd7\xe3\xa7b]r{\xbbMO\xf1\x18\x89e2\x17\x8d4}}.L\xa1H>_AmxP\xde\xe0\xb1\xe1+\xdc\x90\x82O\x92?$Fr\xb2\xab\x00\x92\x9c\x88\xaf\xd8\x01RK-\xec\x03\x9f\xafH\xa8%t?\xe9\xb6a}\xe8q6\xcd\xf5p\x97OL\xb0\bT\x86\x9f.\xbd\xc3\x04\xce\xf5\x9a\x9eE\xa6!\x84\xd2\xd2\xc5?M\"\xf7\x1aC\x98\xf7c\xad\x84\xf0\f\x80\xc6\xdc\\ny-D\xf9|\xbf\xf2KcY\x03E\xd2\xda\xcf\xcaF\xb1Wlf%\xe9]3L\x15\xdd\x7f\xdc\xb9F]lB5\xa7<\xd7\xc7C\x00^\x02SmeS\x7f=\xec\fB\xc8\x8e\xdd\x89\xb2\xd2\'+\xf8\x1b\xb5\xd7\xe2C\xf39\xa5M\xe02\x98\xfd\x10\x99\xfcl[f\x80\xbcE\xfa\x99\xe7rt\xdd\xb1\xb84\xc7$\xae\x7f\xbbq\x9c,u\xe1\xc3\x14t\xf9\xc8\x9c\xd1\xf9\xe4\x14\x10\x8c\xb2') ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x1) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x5, 0x1}) sendfile(r2, r5, 0x0, 0x800000bf) 08:05:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x1, 0x6, 0x1, 0x0, 0x0, [{r0, 0x0, 0x8001}]}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:27 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 1267.512782][T16628] QAT: Invalid ioctl [ 1267.521641][T16628] QAT: Invalid ioctl [ 1267.531248][T16628] QAT: Invalid ioctl 08:05:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x982a460800000000) [ 1267.598004][T16628] QAT: Invalid ioctl 08:05:27 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:05:27 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = syz_genetlink_get_family_id$tipc2(0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x11, 0x101082) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x14, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x810) [ 1267.644281][T16706] FAULT_INJECTION: forcing a failure. [ 1267.644281][T16706] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.697183][T16706] CPU: 0 PID: 16706 Comm: syz-executor.2 Not tainted 5.1.0-rc6+ #83 [ 1267.705214][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.715271][T16706] Call Trace: [ 1267.718576][T16706] dump_stack+0x172/0x1f0 [ 1267.723193][T16706] should_fail.cold+0xa/0x15 [ 1267.727803][T16706] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1267.733629][T16706] ? ___might_sleep+0x163/0x280 [ 1267.738591][T16706] __should_failslab+0x121/0x190 [ 1267.743567][T16706] should_failslab+0x9/0x14 [ 1267.748086][T16706] kmem_cache_alloc+0x2b2/0x6f0 [ 1267.752957][T16706] ? kasan_check_read+0x11/0x20 [ 1267.757837][T16706] vm_area_dup+0x21/0x170 [ 1267.762187][T16706] __split_vma+0xad/0x570 [ 1267.766546][T16706] ? find_vma+0x30/0x170 [ 1267.770808][T16706] __do_munmap+0x2ef/0xef0 [ 1267.775334][T16706] mmap_region+0x227/0x1770 [ 1267.779864][T16706] ? __x64_sys_brk+0x760/0x760 [ 1267.784645][T16706] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1267.790907][T16706] ? get_unmapped_area+0x295/0x3b0 08:05:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1267.796099][T16706] do_mmap+0x8e2/0x1080 [ 1267.800312][T16706] vm_mmap_pgoff+0x1c5/0x230 [ 1267.804925][T16706] ? vma_is_stack_for_current+0xd0/0xd0 [ 1267.810480][T16706] ? ksys_dup3+0x3e0/0x3e0 [ 1267.814945][T16706] ksys_mmap_pgoff+0x4aa/0x630 [ 1267.819729][T16706] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1267.825123][T16811] FAULT_INJECTION: forcing a failure. [ 1267.825123][T16811] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.825407][T16706] ? __ia32_sys_read+0xb0/0xb0 [ 1267.825504][T16706] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1267.825537][T16706] ? do_fast_syscall_32+0xd1/0xc98 [ 1267.853941][T16706] ? entry_SYSENTER_compat+0x70/0x7f [ 1267.859243][T16706] __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1267.864562][T16706] do_fast_syscall_32+0x281/0xc98 [ 1267.869786][T16706] entry_SYSENTER_compat+0x70/0x7f [ 1267.874904][T16706] RIP: 0023:0xf7fe0869 [ 1267.878983][T16706] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1267.898602][T16706] RSP: 002b:00000000f5ddc0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1267.907032][T16706] RAX: ffffffffffffffda RBX: 0000000020ffb000 RCX: 0000000000004000 [ 1267.915041][T16706] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1267.930232][T16706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.938226][T16706] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1267.946206][T16706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.955791][T16811] CPU: 1 PID: 16811 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #83 [ 1267.963798][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.974609][T16811] Call Trace: [ 1267.977913][T16811] dump_stack+0x172/0x1f0 [ 1267.982267][T16811] should_fail.cold+0xa/0x15 [ 1267.986908][T16811] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1267.992740][T16811] ? inet_select_addr+0x584/0xa30 [ 1267.997884][T16811] __should_failslab+0x121/0x190 [ 1268.003717][T16811] should_failslab+0x9/0x14 [ 1268.003735][T16811] kmem_cache_alloc+0x47/0x6f0 [ 1268.003751][T16811] ? lock_downgrade+0x880/0x880 [ 1268.003765][T16811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.003780][T16811] dst_alloc+0x10e/0x200 [ 1268.003801][T16811] rt_dst_alloc+0x83/0x3f0 [ 1268.003823][T16811] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 1268.038966][T16811] ? ip_route_input_noref+0x280/0x280 [ 1268.044392][T16811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.050757][T16811] ? kasan_check_read+0x11/0x20 [ 1268.055650][T16811] ip_route_output_key_hash+0x212/0x380 [ 1268.061232][T16811] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 1268.067551][T16811] tcp_v4_connect+0x7ec/0x1c40 [ 1268.072409][T16811] ? tcp_v4_parse_md5_keys+0x270/0x270 [ 1268.077923][T16811] __inet_stream_connect+0x83f/0xea0 [ 1268.083230][T16811] ? mark_held_locks+0xa4/0xf0 [ 1268.088021][T16811] ? inet_dgram_connect+0x2e0/0x2e0 [ 1268.093258][T16811] ? lock_sock_nested+0x9a/0x120 [ 1268.098222][T16811] ? trace_hardirqs_on+0x67/0x230 [ 1268.104307][T16811] ? lock_sock_nested+0x9a/0x120 [ 1268.109668][T16811] ? __local_bh_enable_ip+0x15a/0x270 [ 1268.115094][T16811] inet_stream_connect+0x58/0xa0 [ 1268.120086][T16811] __sys_connect+0x266/0x330 [ 1268.124728][T16811] ? __ia32_sys_accept+0xb0/0xb0 [ 1268.129714][T16811] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1268.136009][T16811] ? fput_many+0x12c/0x1a0 [ 1268.140561][T16811] ? fput+0x1b/0x20 [ 1268.144393][T16811] ? ksys_write+0x1f1/0x2d0 [ 1268.149360][T16811] ? __ia32_sys_read+0xb0/0xb0 [ 1268.154160][T16811] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1268.159651][T16811] ? do_fast_syscall_32+0xd1/0xc98 [ 1268.164782][T16811] ? entry_SYSENTER_compat+0x70/0x7f [ 1268.170095][T16811] ? do_fast_syscall_32+0xd1/0xc98 [ 1268.175234][T16811] __ia32_sys_connect+0x72/0xb0 [ 1268.180108][T16811] do_fast_syscall_32+0x281/0xc98 [ 1268.185163][T16811] entry_SYSENTER_compat+0x70/0x7f [ 1268.190298][T16811] RIP: 0023:0xf7f30869 08:05:27 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x9, 0x6, 0x7, 0x200, 'syz1\x00', 0xfffffffffffff95c}, 0x0, [0x0, 0x100000000, 0x9, 0x401, 0x1, 0x4, 0x2, 0x101, 0x1, 0x6, 0x5, 0x7, 0x2, 0x9, 0x10001, 0x65, 0x1, 0x4664, 0x9, 0x20, 0x40, 0x5, 0x20200000000000, 0x9, 0x2, 0x9, 0x7, 0x5, 0x0, 0x6, 0x2, 0x7fffffff, 0x8, 0x101, 0x2, 0x8, 0x73f, 0xfffffffffffffffe, 0x80000001, 0x1, 0xfffffffffffffe26, 0x4, 0x2, 0x1ff, 0xfffffffffffffffb, 0x1, 0x10000, 0x200, 0x8, 0x5, 0xffff, 0xa61, 0x9, 0x0, 0x0, 0x9, 0x8, 0x94d9, 0x5, 0x0, 0x8, 0x2, 0x7f, 0x200, 0x1000, 0x3, 0x4, 0x7fff, 0x101, 0x5, 0x0, 0x8001, 0x38000000000000, 0x9, 0xfffffffffffffffd, 0x1, 0x0, 0x8001, 0x2, 0x101, 0x2, 0x3, 0x2bc, 0x20, 0x16e, 0x3, 0x200, 0x101, 0x9, 0x80, 0x0, 0x1f, 0x6, 0x44652510, 0x81, 0xbb3d, 0x8, 0x2, 0x2, 0x8, 0x3, 0x7, 0x9, 0x5, 0x3, 0x2, 0x0, 0x100000001, 0xffffffffffff5b26, 0x3, 0x6, 0x5, 0x1f, 0x1, 0x81, 0xdbdb, 0x9, 0xac, 0x5, 0xb9, 0x0, 0x200, 0x1, 0x1, 0xa65f, 0x5, 0x5, 0x1], {0x77359400}}) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:27 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x14000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x100000001}, &(0x7f0000000080)=0x8) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f0000000200)='/dev/snd/timer\x00', 0xf, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x7fffffff, 0x4, 0x1, 0x0, r2}, &(0x7f0000000100)=0x10) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000001c0)) syz_genetlink_get_family_id$tipc2(0x0) 08:05:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1268.194390][T16811] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1268.214044][T16811] RSP: 002b:00000000f5d2c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 1268.214060][T16811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1268.214066][T16811] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.214073][T16811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 08:05:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) dup3(r1, r0, 0x0) 08:05:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) [ 1268.214079][T16811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1268.214086][T16811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:05:27 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:27 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:05:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1268.439002][T17274] FAULT_INJECTION: forcing a failure. [ 1268.439002][T17274] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.453763][T17253] FAULT_INJECTION: forcing a failure. [ 1268.453763][T17253] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.503404][T17274] CPU: 1 PID: 17274 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #83 [ 1268.511441][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.521526][T17274] Call Trace: [ 1268.524846][T17274] dump_stack+0x172/0x1f0 [ 1268.529303][T17274] should_fail.cold+0xa/0x15 [ 1268.533925][T17274] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1268.539796][T17274] ? kasan_check_read+0x11/0x20 [ 1268.544674][T17274] __should_failslab+0x121/0x190 [ 1268.549629][T17274] should_failslab+0x9/0x14 [ 1268.554159][T17274] kmem_cache_alloc+0x47/0x6f0 [ 1268.558942][T17274] ? ip_route_output_key_hash_rcu+0x1567/0x30e0 [ 1268.565209][T17274] dst_alloc+0x10e/0x200 [ 1268.569570][T17274] rt_dst_alloc+0x83/0x3f0 [ 1268.574008][T17274] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 1268.580018][T17274] ? ip_route_input_noref+0x280/0x280 [ 1268.585415][T17274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.591684][T17274] ? kasan_check_read+0x11/0x20 [ 1268.596570][T17274] ip_route_output_key_hash+0x212/0x380 [ 1268.602141][T17274] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 1268.608407][T17274] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1268.613750][T17274] ip_route_output_flow+0x28/0xc0 [ 1268.618825][T17274] tcp_v4_connect+0x8a7/0x1c40 [ 1268.623628][T17274] ? tcp_v4_parse_md5_keys+0x270/0x270 [ 1268.629124][T17274] __inet_stream_connect+0x83f/0xea0 [ 1268.634735][T17274] ? mark_held_locks+0xa4/0xf0 [ 1268.639537][T17274] ? inet_dgram_connect+0x2e0/0x2e0 [ 1268.644757][T17274] ? lock_sock_nested+0x9a/0x120 [ 1268.649714][T17274] ? trace_hardirqs_on+0x67/0x230 [ 1268.654768][T17274] ? lock_sock_nested+0x9a/0x120 [ 1268.659732][T17274] ? __local_bh_enable_ip+0x15a/0x270 [ 1268.665132][T17274] inet_stream_connect+0x58/0xa0 [ 1268.670102][T17274] __sys_connect+0x266/0x330 [ 1268.674727][T17274] ? __ia32_sys_accept+0xb0/0xb0 [ 1268.679694][T17274] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1268.685959][T17274] ? fput_many+0x12c/0x1a0 [ 1268.690404][T17274] ? fput+0x1b/0x20 [ 1268.694251][T17274] ? ksys_write+0x1f1/0x2d0 [ 1268.698780][T17274] ? __ia32_sys_read+0xb0/0xb0 [ 1268.703570][T17274] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1268.709069][T17274] ? do_fast_syscall_32+0xd1/0xc98 [ 1268.714207][T17274] ? entry_SYSENTER_compat+0x70/0x7f [ 1268.719527][T17274] ? do_fast_syscall_32+0xd1/0xc98 [ 1268.724672][T17274] __ia32_sys_connect+0x72/0xb0 [ 1268.729902][T17274] do_fast_syscall_32+0x281/0xc98 [ 1268.734962][T17274] entry_SYSENTER_compat+0x70/0x7f [ 1268.740111][T17274] RIP: 0023:0xf7f30869 [ 1268.744195][T17274] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1268.763905][T17274] RSP: 002b:00000000f5d2c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 1268.772335][T17274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1268.780538][T17274] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.788557][T17274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1268.796551][T17274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 08:05:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) write$UHID_CREATE(r2, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000000)=""/23, 0x17, 0x2, 0x3, 0x1, 0x1000}, 0x11c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) 08:05:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x100, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0xffffffffffffab60, 0x1870, 0x1000, 0x4, 0x0, 0x8, 0x4080, 0x4, 0x0, 0x2, 0x80000000, 0x2, 0x7, 0x1, 0x8, 0x4, 0x3, 0x6, 0x2, 0x9, 0x200, 0x5377, 0x80, 0xfff, 0x5, 0x8, 0x1000, 0x1ff, 0x40, 0x9, 0x3, 0x4, 0x2, 0x6, 0xcb9e, 0x2, 0x0, 0x5, 0x1, @perf_config_ext={0x7f, 0x9}, 0x2000, 0xff, 0x1ff, 0x4, 0x1, 0x0, 0x7}, r2, 0xffffffffffffffff, r1, 0x3) prctl$PR_CAPBSET_DROP(0x18, 0x1f) syz_genetlink_get_family_id$tipc2(0x0) rt_sigaction(0x6, &(0x7f0000000140)={&(0x7f00000000c0)="0ff923c4e124579202000000c4c1fd286f03650f9966066766f30f103bc4e1e85c22c4e155dcf0c4c1f1e0ab0e000000c4e2d19927de7e00", {0x8}, 0x10000000, &(0x7f0000000100)="c4e18dd8e6d85993c4c175d02a660f2c489d8fc978d7a1770318b78fe940023265dc3500000000c4e2791d94fd7f915072f00fc74906f0806e05b4"}, 0x0, 0x8, &(0x7f0000000180)) 08:05:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) [ 1268.804556][T17274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1268.812578][T17253] CPU: 0 PID: 17253 Comm: syz-executor.2 Not tainted 5.1.0-rc6+ #83 [ 1268.820693][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.830786][T17253] Call Trace: [ 1268.834136][T17253] dump_stack+0x172/0x1f0 [ 1268.838618][T17253] should_fail.cold+0xa/0x15 [ 1268.843266][T17253] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1268.849152][T17253] __should_failslab+0x121/0x190 [ 1268.854114][T17253] should_failslab+0x9/0x14 [ 1268.858651][T17253] kmem_cache_alloc+0x47/0x6f0 [ 1268.863441][T17253] ? vm_area_dup+0x21/0x170 [ 1268.867975][T17253] ? rcu_read_lock_sched_held+0x110/0x130 [ 1268.873809][T17253] anon_vma_clone+0xde/0x480 [ 1268.878466][T17253] __split_vma+0x180/0x570 [ 1268.883003][T17253] ? find_vma+0x30/0x170 [ 1268.887273][T17253] __do_munmap+0x2ef/0xef0 [ 1268.891714][T17253] mmap_region+0x227/0x1770 [ 1268.896252][T17253] ? __x64_sys_brk+0x760/0x760 [ 1268.901067][T17253] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1268.901081][T17253] ? get_unmapped_area+0x295/0x3b0 [ 1268.901100][T17253] do_mmap+0x8e2/0x1080 [ 1268.901121][T17253] vm_mmap_pgoff+0x1c5/0x230 [ 1268.901142][T17253] ? vma_is_stack_for_current+0xd0/0xd0 [ 1268.901156][T17253] ? ksys_dup3+0x3e0/0x3e0 [ 1268.901179][T17253] ksys_mmap_pgoff+0x4aa/0x630 [ 1268.912571][T17253] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1268.912589][T17253] ? __ia32_sys_read+0xb0/0xb0 [ 1268.912606][T17253] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1268.912622][T17253] ? do_fast_syscall_32+0xd1/0xc98 [ 1268.912636][T17253] ? entry_SYSENTER_compat+0x70/0x7f [ 1268.912653][T17253] __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1268.912671][T17253] do_fast_syscall_32+0x281/0xc98 [ 1268.912689][T17253] entry_SYSENTER_compat+0x70/0x7f [ 1268.912700][T17253] RIP: 0023:0xf7fe0869 [ 1268.912716][T17253] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 08:05:28 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 1268.912723][T17253] RSP: 002b:00000000f5ddc0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1268.912737][T17253] RAX: ffffffffffffffda RBX: 0000000020ffb000 RCX: 0000000000004000 [ 1268.912746][T17253] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1268.912752][T17253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1268.912759][T17253] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1268.912766][T17253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:05:28 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 08:05:28 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xa4, 0x20400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)=0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x379bcbbc, 0xdfbb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)=0x1) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x40800) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x529a}, 0x4) syz_genetlink_get_family_id$tipc2(0x0) 08:05:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1269.143167][T17664] FAULT_INJECTION: forcing a failure. [ 1269.143167][T17664] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.156361][T17664] CPU: 0 PID: 17664 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #83 [ 1269.164360][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.174442][T17664] Call Trace: [ 1269.177788][T17664] dump_stack+0x172/0x1f0 [ 1269.182149][T17664] should_fail.cold+0xa/0x15 [ 1269.186790][T17664] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1269.192619][T17664] ? mark_held_locks+0xf0/0xf0 [ 1269.197417][T17664] __should_failslab+0x121/0x190 [ 1269.202375][T17664] should_failslab+0x9/0x14 [ 1269.206903][T17664] kmem_cache_alloc+0x47/0x6f0 [ 1269.211688][T17664] ? rwlock_bug.part.0+0x90/0x90 [ 1269.216649][T17664] ? lock_acquire+0x16f/0x3f0 [ 1269.221342][T17664] ? __inet_hash_connect+0x3fd/0xfa0 [ 1269.226667][T17664] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1269.232411][T17664] inet_bind_bucket_create+0x2e/0x290 [ 1269.237815][T17664] __inet_hash_connect+0x6c9/0xfa0 [ 1269.242964][T17664] ? __inet_lookup_established+0x490/0x490 [ 1269.248792][T17664] ? inet_hash+0xb0/0xb0 [ 1269.253099][T17664] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1269.259403][T17664] inet_hash_connect+0x7a/0x150 [ 1269.264327][T17664] tcp_v4_connect+0xe43/0x1c40 [ 1269.269226][T17664] ? tcp_v4_parse_md5_keys+0x270/0x270 [ 1269.274711][T17664] __inet_stream_connect+0x83f/0xea0 [ 1269.280006][T17664] ? mark_held_locks+0xa4/0xf0 [ 1269.284799][T17664] ? inet_dgram_connect+0x2e0/0x2e0 08:05:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x260}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x2ac, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2aa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80f4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffff8000}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a8d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c00000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) [ 1269.290012][T17664] ? lock_sock_nested+0x9a/0x120 [ 1269.294966][T17664] ? trace_hardirqs_on+0x67/0x230 [ 1269.300003][T17664] ? lock_sock_nested+0x9a/0x120 [ 1269.305579][T17664] ? __local_bh_enable_ip+0x15a/0x270 [ 1269.311063][T17664] inet_stream_connect+0x58/0xa0 [ 1269.316025][T17664] __sys_connect+0x266/0x330 [ 1269.320724][T17664] ? __ia32_sys_accept+0xb0/0xb0 [ 1269.325686][T17664] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1269.331962][T17664] ? fput_many+0x12c/0x1a0 [ 1269.336393][T17664] ? fput+0x1b/0x20 08:05:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1269.340229][T17664] ? ksys_write+0x1f1/0x2d0 [ 1269.344752][T17664] ? __ia32_sys_read+0xb0/0xb0 [ 1269.349551][T17664] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1269.355058][T17664] ? do_fast_syscall_32+0xd1/0xc98 [ 1269.360209][T17664] ? entry_SYSENTER_compat+0x70/0x7f [ 1269.365502][T17664] ? do_fast_syscall_32+0xd1/0xc98 [ 1269.365591][T17664] __ia32_sys_connect+0x72/0xb0 [ 1269.365607][T17664] do_fast_syscall_32+0x281/0xc98 [ 1269.365627][T17664] entry_SYSENTER_compat+0x70/0x7f [ 1269.365639][T17664] RIP: 0023:0xf7f30869 08:05:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0xffffffffff7ffffc, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000140)={0x10001, 0xe6a}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r0, 0x0, 0x1000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/81) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', 0x2}) getpeername$unix(r0, &(0x7f0000000040), &(0x7f0000000100)=0x6e) [ 1269.365659][T17664] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1269.409763][T17664] RSP: 002b:00000000f5d2c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 1269.418196][T17664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1269.426304][T17664] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.434294][T17664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.442274][T17664] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1269.442282][T17664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:05:29 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x4, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000200)={0x2, 0x2, 0x7fff, 'queue0\x00', 0x7}) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x2, 0x20, 0x7, 0x8}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e20, 0xa5, @mcast2}}}, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1269.594309][T17897] picdev_read: 374 callbacks suppressed [ 1269.594346][T17897] kvm: pic: non byte read [ 1269.614177][T17897] kvm: pic: non byte read [ 1269.619478][T17897] kvm: pic: non byte read 08:05:29 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 1269.669418][T17897] kvm: pic: non byte read 08:05:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1269.730790][T17897] kvm: pic: non byte read 08:05:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r2 = dup2(r1, r1) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(0x0) [ 1269.904844][T17931] bridge0: port 1(bridge_slave_0) entered disabled state 08:05:29 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:05:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:29 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4002, 0x0, 0x12, r0, 0x0) 08:05:29 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x8, 0x800) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000380)={0x7, 0x9, 0x2, 0x3, 0x800, 0xed51}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000000000, 0xfffffffffffffffc, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffff13c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sync_file_range(r0, 0x6, 0x5, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:05:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') pwrite64(r0, &(0x7f0000000100)="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", 0x1000, 0x0) sendfile(r1, r0, 0x0, 0xffff) 08:05:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101200, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x18) 08:05:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:29 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4004, 0x0, 0x12, r0, 0x0) [ 1270.187019][T18523] FAULT_INJECTION: forcing a failure. [ 1270.187019][T18523] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.283289][T18523] CPU: 1 PID: 18523 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #83 [ 1270.291323][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.301422][T18523] Call Trace: [ 1270.304736][T18523] dump_stack+0x172/0x1f0 [ 1270.309100][T18523] should_fail.cold+0xa/0x15 [ 1270.313732][T18523] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1270.319577][T18523] ? kasan_check_read+0x11/0x20 [ 1270.324457][T18523] __should_failslab+0x121/0x190 [ 1270.329422][T18523] should_failslab+0x9/0x14 [ 1270.333937][T18523] kmem_cache_alloc+0x47/0x6f0 [ 1270.338735][T18523] ? ip_route_output_key_hash_rcu+0x1567/0x30e0 [ 1270.345006][T18523] dst_alloc+0x10e/0x200 [ 1270.349277][T18523] rt_dst_alloc+0x83/0x3f0 [ 1270.353722][T18523] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 1270.359730][T18523] ? ip_route_input_noref+0x280/0x280 [ 1270.365125][T18523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.371410][T18523] ? kasan_check_read+0x11/0x20 [ 1270.376309][T18523] ip_route_output_key_hash+0x212/0x380 [ 1270.381879][T18523] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 1270.388141][T18523] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1270.393460][T18523] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1270.399727][T18523] ip_route_output_flow+0x28/0xc0 [ 1270.404781][T18523] tcp_v4_connect+0x124f/0x1c40 [ 1270.409669][T18523] ? tcp_v4_parse_md5_keys+0x270/0x270 [ 1270.415152][T18523] __inet_stream_connect+0x83f/0xea0 [ 1270.420458][T18523] ? mark_held_locks+0xa4/0xf0 [ 1270.425239][T18523] ? inet_dgram_connect+0x2e0/0x2e0 [ 1270.430449][T18523] ? lock_sock_nested+0x9a/0x120 [ 1270.435439][T18523] ? trace_hardirqs_on+0x67/0x230 [ 1270.440477][T18523] ? lock_sock_nested+0x9a/0x120 [ 1270.445445][T18523] ? __local_bh_enable_ip+0x15a/0x270 [ 1270.450837][T18523] inet_stream_connect+0x58/0xa0 [ 1270.455801][T18523] __sys_connect+0x266/0x330 [ 1270.460411][T18523] ? __ia32_sys_accept+0xb0/0xb0 [ 1270.465369][T18523] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1270.471646][T18523] ? fput_many+0x12c/0x1a0 [ 1270.476086][T18523] ? fput+0x1b/0x20 [ 1270.479907][T18523] ? ksys_write+0x1f1/0x2d0 [ 1270.484460][T18523] ? __ia32_sys_read+0xb0/0xb0 [ 1270.489240][T18523] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1270.494730][T18523] ? do_fast_syscall_32+0xd1/0xc98 [ 1270.499863][T18523] ? entry_SYSENTER_compat+0x70/0x7f [ 1270.505332][T18523] ? do_fast_syscall_32+0xd1/0xc98 [ 1270.510464][T18523] __ia32_sys_connect+0x72/0xb0 [ 1270.515369][T18523] do_fast_syscall_32+0x281/0xc98 [ 1270.520423][T18523] entry_SYSENTER_compat+0x70/0x7f [ 1270.525557][T18523] RIP: 0023:0xf7f30869 08:05:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:30 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x401e, 0x0, 0x12, r0, 0x0) 08:05:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) socketpair(0x0, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(r1, 0x0, 0x0, 0x80000) [ 1270.529643][T18523] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1270.549608][T18523] RSP: 002b:00000000f5d2c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 1270.558222][T18523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1270.566362][T18523] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1270.574352][T18523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 08:05:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x40000008, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x800000bf) [ 1270.574361][T18523] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1270.574370][T18523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:05:30 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:05:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x4001, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000380)={0xff, 0x0, 0x10003, 0x1ff}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40086439, &(0x7f00000003c0)={0x2, r4}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:05:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2f, 'pids'}, {0x2d, 'memory'}]}, 0xe) sendfile(r0, r1, 0x0, 0x800000bf) [ 1270.833669][T19237] FAULT_INJECTION: forcing a failure. [ 1270.833669][T19237] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.846918][T19237] CPU: 1 PID: 19237 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #83 [ 1270.854911][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.864979][T19237] Call Trace: [ 1270.868332][T19237] dump_stack+0x172/0x1f0 [ 1270.872705][T19237] should_fail.cold+0xa/0x15 [ 1270.877320][T19237] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1270.883151][T19237] ? __ia32_sys_connect+0x72/0xb0 [ 1270.888222][T19237] ? do_fast_syscall_32+0x281/0xc98 [ 1270.893443][T19237] ? entry_SYSENTER_compat+0x70/0x7f [ 1270.898758][T19237] __should_failslab+0x121/0x190 [ 1270.903726][T19237] should_failslab+0x9/0x14 [ 1270.908286][T19237] kmem_cache_alloc_trace+0x4b/0x760 [ 1270.913597][T19237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.919864][T19237] ? __tcp_get_metrics+0x388/0x460 [ 1270.925015][T19237] tcp_get_metrics+0x358/0xc80 [ 1270.929821][T19237] ? tcpm_check_stamp+0xb0/0xb0 [ 1270.934707][T19237] ? check_usage+0x62/0x570 [ 1270.939239][T19237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.945524][T19237] ? kasan_check_read+0x11/0x20 [ 1270.950435][T19237] tcp_init_metrics+0x141/0xc50 [ 1270.955327][T19237] tcp_init_transfer+0xf0/0x3e0 [ 1270.960298][T19237] ? tcp_splice_read+0xc30/0xc30 [ 1270.965297][T19237] ? ip_route_output_key_hash+0x242/0x380 [ 1270.971135][T19237] ? find_held_lock+0x35/0x130 [ 1270.975921][T19237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.982270][T19237] ? tcp_chrono_stop+0x1f9/0x3b0 [ 1270.987241][T19237] tcp_finish_connect+0x1b3/0x510 [ 1270.992295][T19237] tcp_connect+0x3471/0x4330 [ 1270.996912][T19237] ? tcp_push_one+0x110/0x110 [ 1271.001624][T19237] ? dst_release+0x62/0xb0 [ 1271.006070][T19237] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1271.012348][T19237] ? sk_setup_caps+0x20a/0x6a0 [ 1271.012412][T19237] tcp_v4_connect+0x1514/0x1c40 [ 1271.012439][T19237] ? tcp_v4_parse_md5_keys+0x270/0x270 [ 1271.012460][T19237] __inet_stream_connect+0x83f/0xea0 [ 1271.012483][T19237] ? mark_held_locks+0xa4/0xf0 [ 1271.027585][T19237] ? inet_dgram_connect+0x2e0/0x2e0 [ 1271.027603][T19237] ? lock_sock_nested+0x9a/0x120 [ 1271.027619][T19237] ? trace_hardirqs_on+0x67/0x230 [ 1271.027633][T19237] ? lock_sock_nested+0x9a/0x120 [ 1271.027655][T19237] ? __local_bh_enable_ip+0x15a/0x270 [ 1271.063185][T19237] inet_stream_connect+0x58/0xa0 [ 1271.068150][T19237] __sys_connect+0x266/0x330 [ 1271.072783][T19237] ? __ia32_sys_accept+0xb0/0xb0 [ 1271.077740][T19237] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1271.083997][T19237] ? fput_many+0x12c/0x1a0 [ 1271.088454][T19237] ? fput+0x1b/0x20 [ 1271.092287][T19237] ? ksys_write+0x1f1/0x2d0 [ 1271.096805][T19237] ? __ia32_sys_read+0xb0/0xb0 [ 1271.096824][T19237] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1271.096840][T19237] ? do_fast_syscall_32+0xd1/0xc98 [ 1271.096864][T19237] ? entry_SYSENTER_compat+0x70/0x7f [ 1271.117481][T19237] ? do_fast_syscall_32+0xd1/0xc98 [ 1271.117504][T19237] __ia32_sys_connect+0x72/0xb0 [ 1271.117532][T19237] do_fast_syscall_32+0x281/0xc98 [ 1271.117553][T19237] entry_SYSENTER_compat+0x70/0x7f [ 1271.117565][T19237] RIP: 0023:0xf7f30869 [ 1271.117579][T19237] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1271.117595][T19237] RSP: 002b:00000000f5d2c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 1271.170020][T19237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1271.178049][T19237] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 08:05:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x80000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:30 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0xdf003000, 0x0, 0x12, r0, 0x0) 08:05:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) syncfs(r2) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc04c561a, &(0x7f0000000380)={0xffffffffffffffff, "c1ceffe4d2476ac99a5457119b15ee6d8028330658e62983eee6abb53bc2c5a1", 0xb58ee58c3fd8d127, 0x8, 0x5, 0x3c0ff00, 0x1000315, 0x2}) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x10201, 0xffffffffffffffff, 0x1, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:05:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1271.186041][T19237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.194037][T19237] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1271.202033][T19237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:05:30 executing program 5 (fault-call:4 fault-nth:5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:05:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0xffffe000, 0x0, 0x12, r0, 0x0) 08:05:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000100)='wlan0:keyring\x00', &(0x7f0000000140)) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20080, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:05:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) 08:05:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:05:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) renameat(r3, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000003c0)={'veth0_to_team\x00', 0x5}) 08:05:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) 08:05:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0xc000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/63, 0x3f}], 0x5) syz_genetlink_get_family_id$tipc2(0x0) tee(r1, r1, 0x1000, 0x2) 08:05:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x7, 0x0, @loopback}, 0x10) [ 1272.064737][T20331] kvm: pic: non byte read 08:05:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e, 0x12, r0, 0x0) 08:05:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000100)=""/244) r1 = socket$unix(0x1, 0x2, 0x0) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000200)='n\x03t/netfilter\x00') setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000040)="22939f7751a85476ca477385650791a3b87a03f646848c53a3f9cf1f9c1f54c26bcf1b5196ba8c789735d123b8b8bc31ed", 0x31) sendfile(r1, r3, 0x0, 0x800000bf) 08:05:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) [ 1272.161541][T20331] kvm: pic: non byte read 08:05:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xde17c33e9e4cf9c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1b4, r2, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="1c715472d3ce87a46ef36556a8a80899"}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7b}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2793800000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf01}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x8cbd3a6ef5968134}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8a2}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa23}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4004}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) [ 1272.255764][T20331] kvm: pic: non byte read [ 1272.261503][T20331] kvm: pic: non byte read 08:05:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0xa, 0x0, @loopback}, 0x10) 08:05:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e00, 0x12, r0, 0x0) 08:05:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)="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", 0x1000, r0}, 0x68) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x8) 08:05:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000340)={0x1, 0x0, 0xfffffffffffffbff, 0x8000, 0x7f}) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000380)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:05:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0xc, 0x0, @loopback}, 0x10) 08:05:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1f00, 0x12, r0, 0x0) 08:05:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x8, 0x5, 0x0, {0x0, 0x400000000004, 0x5, 0x7}}, 0xfffffffffffffd7b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000180)) 08:05:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f00000003c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:05:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3f00, 0x12, r0, 0x0) 08:05:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0xe0, 0x0, @loopback}, 0x10) 08:05:32 executing program 1: r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40000, 0x8) utimensat(r0, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffe, 0x100) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000600)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x25}, 0x35, r3}) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={r5, r4, r6}, 0xc) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0xc0f85403, &(0x7f00000000c0)=0x3) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) syz_genetlink_get_family_id$tipc2(0x0) r7 = dup(r2) ioctl$CAPI_REGISTER(r7, 0x400c4301, &(0x7f00000001c0)={0xab0, 0x1, 0x3}) 08:05:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x100) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000180)=0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$PPPIOCGIDLE(r0, 0x8008743f, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x8, 0x8) write$eventfd(r2, &(0x7f0000000100)=0x1c, 0x8) 08:05:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0xc, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x800408, 0x12, r0, 0x0) 08:05:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0x7, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0xffe0, 0x0, @loopback}, 0x10) 08:05:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000340)={"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"}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) r2 = syz_genetlink_get_family_id$tipc2(0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x400, 0x14400) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x150, r2, 0x318, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xae35}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc53d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x0) 08:05:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x0, 0x0, 0x0, 0x17) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000400)=0x7, 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x204080, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) getsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:05:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) 08:05:33 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0) 08:05:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7fff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0xffffffe0, 0x0, @loopback}, 0x10) 08:05:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000080)=0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2400000000, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x1, 0x2) r6 = dup(r0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000002980)=0x6) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002480)='/dev/vga_arbiter\x00', 0x200, 0x0) r8 = syz_open_dev$media(&(0x7f00000025c0)='/dev/media#\x00', 0x6000000000000000, 0x20100) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002840)='/dev/null\x00', 0x40, 0x0) io_submit(r2, 0x9, &(0x7f0000002940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x100000000, r0, &(0x7f0000000340)="7f7b41e2b199be00a06b9f26b0ec0eb9ed728c0f2615f60c172f97ea414d1bec9f1071077cc44fc6b9f995040775a9269cf361ff2ac1a07485029cb7164fc459168619ddb7ee137fd6cb0a8ee70fcf9ad73026f25c6eac41d5ec0de6f62ff69c9151640e07c84eb493c1be665dd92eb7d7ed71de8d1de13670ecc6a665cecf5915ab314be76cc0e582ae6f9c8c7367ef194aa1ceeb33f7d9cebc23319953488655ab0c438b14a0fb3bb64ead8e9456f663295eb42e1018f778995140d30e945b93e11fb4d567716bc7997d63a67d2a911f23c73409141a51fcfc820d7c01397ecd47c2d694256c5ff620dc9d75ed940a4064dc8a2d799a304fcb409242a7cedb29e42a0a2c07063b0849863599092594b92d40fd7343d98a48e88fabb8e5efbe83db63e0c8f707d7a1f80db2d72fed42024177d6b576aad77e781446503b0f300b50e90622058c018b15c0017b9b08daac61a010446bd0818d4df4a1e410a29dd93f71de505844404288e320fe7813851c3133143685354c5bc6e00807294b0b86bed3dcd18a228c93f091ad0a543f654fc7a33b055735db56f82ece7103d8f6f1aa3033526a2d2f883707a3d66f821230be784cee9a74915c8b00177680abc5b5bf09627f5b2102302a738230c11f0bb50fde93ba6e897db7bb23d427baf20322f06a5e0f315ce1008db9f4b7c823cbd5b5e73d347f3633467256fdf71705537bfc9e82d3eb448d43e8e705cccee03855f59da2652e9ed16b5922fdc4d417467b7693edfa47d61abfb0724a6c9505829d76410b21778327a64806ea61b1b676a7d39bb2a0a5b8bf8014886b4231985820f2ed3287cc2bfdd7a3747d3d61de8856ee4451a9026c71ed2d73a48ef2c98f0f654f97f347655c6fd972246d1965b2958e38afd8854cee46f0cae87eb050e7fee8bdfe9e72ffa88e2fa8a8fdcfad55eb69a45a2a18d70ca7618616de419eb026189d8ca2feac031b951dfed2cc0c136495cd80143d4e07531bf15ef0a53783b3269d9780609291eef7d0d851ff1b35b7e65bc5007b530c2c2757b0488faa0c4ec4be5592060a2a9d24bf5248ff4e7877e2f97352d57b71ea951fe4924e0d697dd9b0cd93ece2bc269428ba136129731974a9730ad79a656be9bdc87aee65376942aa9d011598d31742beef4ca513d2ca5f4cd6318dd6794883e67bd7f5bbf6db835ec92b3ad6088ac1a7ca12100dc13c4bfd19398e0833465dd90e8663f598b596ebb895838db4597dd82c8a7eb14d6b7346178ffb1e07547d8c4a535b5c68f30c65ed25835dcb675a371b248ee15b38e7eee0042a738abe4e31234406a95ab78b79e8c6fa9a64599b026b2680de77ef98f6ede5e63eee8bffb61c76e552294497a903054a89aacd3423f8883bb0be4187036f22a2ed258280a4db2c90646bfc5a21601d3557aa045af6c8b421859cb67ef711c0c0369362a4c795c2ca127f37ef2fe80dc666d8fcebac96643e13c228863c3029b4ee13e79916587c336dde83f80864e2945552208ebee5836df28727d3a1b9ce5df69960d13775b77071e988b19d805667c11deb9e81de93dd4837f3790631b46fc819f071c67399f24862b6daee6348d85f738d695b9de29ea9710e4983e6ff6b9e4d65cbc744c28f014ec3ad7f678e1222c54f5a67edfb0ad1043b8fbf0593de42dddfefc5794dbce6014e251975ad2f284b2e33cb6e85228eff48fbdd23eb326b8892cc40915df010eedd3f2fea354a42aec8fe232436dc98e8b87d4682895238cf9a981ca2a9d823aea6ff85a2e1214b7b552b28a2aadae650d4a1b54b79f541fe0b8b70d40952d1acb4530a990f6cc3512880a29962cfde7615057043255ccebaf3ee499d3b9cc1c6e9c61dbc91bc46dc0ab7726857976824c4debe08df36a08179783e06742e79414ce62934c0d98893bd20247f7406e8e8cc8124ef55d1d9abb20b82132ca047c511a447991d972ceeae192cdad5c36661d7604ef83ae33eca5d4a32d58c48d513b4b9e685fb983eb58f23bb14ead562cbae1083b0f4658b6a4936d63fe3b701ad879a58ea4069e7cd9f86bad7895a7d234c4b3f5303b5636fa9084152d27bba449534b372a679e7c4056bf9ca0f0e3d7b622356bee55451972c5448777f92458bf51d6a6c06e61ea02ad1b340308a345b9694e08acd55ac09c9874e6ca853349ddc4d8a7b4514599b990ef69755e8cac044ab41f0804d5b4f51df9c197eb4f9230dbe08758daf069cee17e6d1d9eb5b034ded353f5f7ee2c95caf939ff8bc02657fe63edb3e36e0a5db6f41f227faca30bf43f7eaf4f66cea3884b5e64a868620d8fb6a32b6bcaad6965fa1e7524063704c4ed4714e0cab1388c571a80d42a1ea59dfc4308d8f355f581b2fb5437fd0fce75672b4e2f1319f87c69872845cbfea7d4b91d917b5827709ca14691d2beff4278ecc0d5a0883d83f65fa54cad2bc34fd3aae872c6229f0d804a523f07cecc98d191ab2de44c64c90cdafbb59105d0129e18be4d10819a1f2934244825196801bb423fd4b48c4fd90ef4a01fc168b8281af0a8dbaf6a0da3c95f6d38e37527d99b97175aeb09cec68da9f548765d7a7007495763ac2fc234d7403d2f6169cb1a0534192c8c67ea1350ab98faafc9a0103d3901761aaf937f484523d79df0dd7063431b8d08035eb304c444a45f9a67f84cadc0656b848946adb1e17b629fd9b25483f8f8e85769ec4e0fcdc8414064d366a0b652d94e8b6cbfb2dc93f766666c817e8a3662d10aed89722a4e3bcc01ce3108a338d6b85efbfab460d796c458c6ca23be7abf06135828bdd410a64f101986e27eaa587f631f16b3fcf17313393944c33e96b6b2d873b0ada326bc68fa182749e164b1cfa55704ce19a91bbdc0c11ad917f4a5d7362d8c8d325fc83fe1e1b749e6367321663844bc7d45b7a39d8cec0030d421d654ae37ee7c84f497ce8b14c2c17ef9575a15761a4af63c5e139cb56337bca8c5a287895ec83653ba291cf0ac04779e667a972e94aea19de583096e35d5d6d0db4c3be42f1fb91ae7ce92590af76cc2a1bcff926e39a3310b9eb2ac5ba5d54b107997407f49dccaf4c0a5a2ebecd3e942265b5aab1d5c8df17543a6ca96ae40f5d45655e9a268642dbe54c07f327da47d2ec1e198a4a9eaeed805fdafa7f2afa55bd7475929094ff8d1e88d6d4f2a355c6f89524732f816dd43e4f6cdf75f6509b7ff763144d12b81b8d73587cc078a0ca86a36bc01db23bc376f7f52980087cbc811c09be65f751a65957a286a835ccd47c2dec32f051eb7725ace781f96bea0a55c97f9f92a618ae37127d482f706c0e3e4e88a1d8443b120a01ccff0a5cb5e2066e071dfec0c0c70b1a563b0483e42e4cbcbbda6ed4fbbcbe46f2080b8f3de4f799bdea4700a561d9e0a07018530ee8f158b4168032e42b16a396065e27691683a9997b6b000ab7ba60c03cf51f50d5540e77daebb46961ed5e9bc08794bd35576f6f3a5cd263e11b28ca840b15dd4752c9b89c1305931ae21a7dbfc4a70f3203386364d043452d714b3ce05137728fc098928c49b9919bb267c76562771af38bd89101f74388bb0ba85ad20d0ade06667a242c54c3781fe4a55bfce3ee894fa21dc50fa4da7358a6878228b7ec8e6b7b2d621638d23cdd12fb93893299970257080a2e3d5543ec0f94d4d12780621cfbc1084fb6c4daac42834666b39a9df3494928bb0d9fd3dc947e9fe34a27560b525250a1aeba9cccd8b8abd68562f64706158fe0d6f2d319d732e4566f3da6a16942619245c13a7d2f99e4aeb335b958cb6f407d65c9afccdd63cfadf5f49d0a6de54e48de30e2438310933b07827a794eeafbfb3f2657fb31f81ee2396efb66a841ba5a543a2a9477fe8528f118caa10595bbb32dc2827d3f73c9f48ceec3de2c2a1cfd97e0fd315837059934033f0b03c78d3059f8069cf5e12695a4f79980a9358a67c9d75bdcf57752c5b61c68236cc5144ab3979f5e6beb9983d72ac1756ebca80fae52c7f3b780810152b1414ce0f0bff3ab375f5a66e9cf852d87608f977b7b3aafaa29813c7c744ac7771be2135ed656616fdf681f9b0007df53652496b409456d49624ad489a720ecc7e3d8275b11b5980060f5247b3f540c52377274f3478032c26af8c6beb4dec25a48fb6ae8e2f3385d6f7190ade2141f2044f8a6541019c1a1dbb9ceaa63da09abd6a37974024c099ff8ed5dd94c98beecb0c63509c56acf3ae31541240029727752f3ff662b015af99b0375186f9d7bff01bbfabaab3be511ee9821d57a281bf5054788c6a587fea197b7911974fbb985d9941a7ba178e4c35af4fb91a1ad29612df1ef1970e6392db87604c0fc5ddb9463baed2461285046b18278e9ab5d2ae75dc5aed1207853f380393ff461d339c54002e5727d08ad3dd312c12e4e32fc487bec67287c737e3765352a974f8154a67d825c388b2a19da8ec30e7b97e3f669a308425cc4ae1fe1a109d156b25e0c7a335e058a724988d5dd73f1b70571eea3548e7b7f2184d675ae7a8d9a8fdb5f247644bd733898b71309b2f5d61495aebc138d41cf101eb9957e70376d8dae0160b629f5ca16b006a56cd1a509b0d1fab533b7dbc5ea9b5ca354ba48267a70671918bc3561f870c39576cb9d59c723d33557cc2a3b37110495decbfbf083701cb800732cd60e84b8e0e51ac724547c7d33ff277e1576e09f3bbe8bec1a74db1b25c7d532a973c42164c130758ae8ed76a536694fa8d78eebd2c4f0f542dd384ceec589efcacfb7585025d971448d95d778d043c972a2d701b3dac8f3e8c3f32a96c82422f190464ada145bac7d5d069dbdcaea4771823ec1b939faafa7fe6f0db8de11c4ea6c7200e7d559895357040f4ec6134fc57d1e81e730445cc03d33f94f33eb0af6bad02f00f7ebf601e457537b078aa393c99908977b294ef5def4e914e1aa424b147e671ce052f9df8e7975e438de85067fafb1679b904ce55dbc233128a8aa23461c5dc69c1a79fd043ccaaf1583a5175431ce33070679806de643172dfe213b54f9b3e04eac765eca8d1bf35c7ae82e231823b0cd42f413bd13682efa3431437f461b8250ffb0ed44e7526e18c73c5dabcebdbc683749e42864ed77603023fbe4bda0d96be5c66f6bf92d52354d4f9551ce59f007b6f2e540471bb00cebbe6beb879a5ca7d5599595ed545788b83e92d8ca740351191ca8da389b0177b70ea99ad385723bb2e45a0529566b7d8ce3e463bf668120144deb2690c94f51ab86ccce2a5b54faf172abf33a7b743b9a14876a390895352282468239fdd1fd64c22ebde374965b89a4e5d8d45d8c1c230607f9345f0925b1a8ab3e9bf4a9433e68f85007858eda8c4852564b6078c0a327cba81c920c4029b509d8636141f4d2f7ddb00c45d8e5fcdc8d151ca357a56ecd31590e8f3150861a040ccceed21c5144fedf29bd8f81734ba4e5b8c99ce5d5fa1bdfdbe9703d99252a5dab006b2a4e2935ce6e63338805901007fc9945448b6b5b0de8527ea566d64adf87b22ec562245e190aae3f0bcfdb4661bd7b1ad88b00354c8bc258e894efce70b1131c2dbb61b156f92e3633c6a4049650ded16ac760e63885a54a6330f4c29352171bf46d57b29cbb0f8b5a9159db81fd099a931b1e29a3d0de351ceed9369e1dd144995d8ca4ceb5131df1e19fdf4c20f6c8bb45d5456d7f9dad910a31a354e68d3b9ee10e7279fa1c3462af0400b04deababc9203e516d1efb5d3364d8685509a9363cb9ae29cd71d8af7372a", 0x1000, 0x3, 0x0, 0x3, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x76ba, r1, &(0x7f0000000140)="ce58a96009eaf1448ff841383ca2858bb6962966285b15eed0667d669da16a39", 0x20, 0xffffffff, 0x0, 0x2, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xfff8000000000000, r1, &(0x7f0000000200)="988133b5c3202ce469190d7f14b6976d7cabcd6983c83f018ec245a4d95f102f2aa060bbc0a44d694402a980f6ac17414c7799229cad168552860ab03d2c850b76846f23f27559fcd8ef656f42b864370d8a7a18e7216e", 0x57, 0x7fffffff, 0x0, 0x2, r5}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000001340)="e240c001c5d62e7752051ba56d52ac7a7dacd45efddccc8fc624a4eb4f004aa619ca90df8c4da808efb4160ecb4f212df5a444722bf365189aa8cb331f6be56921aff5c081aa956b5ba05ecb48e2ae40bf6f8dc76a4fe8e6ad178aab768766168f9c1a9aa2b936109720cee5f21927451fd26dc6cd9760edac717134cc3cefcea4c8512366d04a4a25ae5b64d84bac7dc2dfdfb52e4b7a0d9fe87be3473e9dfd8db3c903c80cca6ceacf2df6570477067580e76eef6ab08ea31bb32f35b7e61d93d9579db786a18687d39572951519fa45f421370fa2145e89465e9d79eb2bdc1220cbf7b98c35e0b127f6be3d55095537f889e4c646772034622d416bd6cea18b1b289b143156856b02a2eea742d8817c805d91465f33bb1c21ba2ec35f344c5acacdca26b922a2d433a34299e00a7c4a6eb01d1a2a2eb67a69ae32432eff252ea5f22e2de88669feb07abbe8f3a232efa7009054e476304df8787b55401ad9db209b6c2f36e64ea724cf2f6c78bb58d2119b4a1fa4a2f0f246e2f85576628eed9d551ded7e39b9b15b02028dec0b487705d23b15aa60438c5eebfdea630143a629073acb1d1be18b05861d4d814023fb84fedeca0c72912c4090f69882203da74d7b627d981841d51a586eabb7b7cab6eea34213078f7005033ba386edad9b2efab84263f30c2e6b095a1434e668d6a97ba49336ba1bf826550055cf6d80aab5f3b92d32308b7ac9b458d958ad22453baeb8d6b19a83dd8f1c40cf73b2b95cf0a073d3eb433723208b637293fa6cbec672b2ef39a6831112ed27951afa5670b316190228e3abf427ac48296f8bde9950bf208f69932ae53b0e229fa58f388472b0a8c566825cc835699de6cd02ba9886af7e9848fcc5ac724c101f2fb71fd52262f02898c7ac91a40955ad4876a45832320f80115297d3627d8e226d73562cf86cc653e6aa16bbe4ea2933e099a4c1b234f1728ab304c8f816b1fca4b498cfbf161fa197001c09b2fa26820fc0c73f0f141349f9de85c4b2464f24ab9b855c93071109135d51b51e616814ef336a707a0db0e78ddd00ab16e7eca253d1e4f589737e6da0012706c8534b585a4674f52a9c61a898e2be2f967ce48d913fcab61f924c6f5c52210bb0258fd6e48dadfe5112d78275ffa2c1697e29dc5dbed67edf91696b7c6f87343909ab65eb244f8d693cfbe0499f03e05755edb4003e2d6ab5795a34c1c01896e8defcc9e27e10b505d041ef24993d78eaef976045014e1462537aa4526a9e9ae0168eaa003a346944d37f0b53c77e27fa523c98dc479cd2fe24603c6898bc9584dc39771510a546d3f8fd1a385cda64b45c667f74fa727fe14ea021a97102abedc8451e755f0c6ae05a613e463af00f5094f37bf9724eb5dd653201c733983620b549dd11b6e3fc61654226b373a1dd13095e5277f077119a82487c05a9bf8bb19c043a2493f4e07a8751487913925447584ae3db7a841b42a6ffdf40b0249449eeeb8f44490980a4c2d45f76ecc3260eecc915c39229dbf909543a75822e0ecac4935ec3c69480fa8425a0269767ad893a5f7ad36bce0480226a2d11d41acd94af2f4661238468196d500bcf449da8b228ad707c9bda015578a32c325bbc5d044d622a5bb2c015871542b34bd57cb18708aba8a456abe7805ed5a8efffbca6d3437cac23bbe1ec921eb4cad0937df7a4a77cde074e9418f67cbe639c942510cd514333822f93f82e5fe7e91d6e1e74f7fee775d695342fcdd183f906f2cc9519a5423bf29ecb80e8ece543535e07fbb4aed7b65067e2dc6927b829d1ca2f85c83d3d3feb1cb129458bf4d22f0971b7a16399a8efbd63b4f69929e949951c454f6ddb5aa4a3ba942f56eff9bec675d7db9913962acaa59c88b6cbe8bdc8a2e2887600b8492e02a3e8aaf1e118762e44f5b767e630a7bb1df378f1c5a14d9e3001d593bac14760f9a1e2cb020fd003b04a793dc0862bd9a3fa65ddad5ef04f4ecd42fe91fe299a2c142cfb192cd41c26dc2d2ac0e832319fa6f181bf22d20ab6ba336d97cdf3e414247b3e1e47f2df13fbc1f77dea50269766ed53758be92a66d5a1715e5c170399e9386be2fdda0d0f0064b28835d144f54ca9043954bb09fe8b86a8e7b00aff78024ddcd6c0841ac7e8563d1f838e70c9a448294edc0ff48bd7ed25ecc6f6adb5d56642f185ac2ee3e12ebdb23a5d9c9378e6ac9d4331b45f80e7820f08fc28440f57d86f233aa56cd942e9d5cdf25997f96257b72c56fd958c2476244c0ec70602cbdd7f5c5ea6b6ece6c878a8c0409c263126f68ad702e0e0faf28c7a258835a545c16ad834a1e5894bb96e344562a3a0a0c20cb333644d9f350881098fac7e65cfc5549a21175e3a9658c223270593366867709b5ae2e7eb6f8bee867db22b24cb91a7578a7f94f01aad40029cf864378ea850f362c074c32a0859a06eb93f05b6f923ba2991dd8e8212edfa371958128d649e3eba38115d628f0d3af5e6cb0b8e5c4f0ed06d9006362f4d3e5bf180d7d8f5cbd57d2aed0a650261da657b03e75813fae15907983354cb2c3a5b0ea43193cadf86aabcfc35256140e1cd56cbf35fcfc90c61a6ac5d685d58a43d2bf5159251df62efcfbf121c7edc7398724184dea5aa153352b14463dbc68c2eeb302ebbf4ae4a8ce36ef32a26b4945aea86271a0355fffc8fa4437aa2e149ddd97ecfcf2e0a00f579f05364a65d12efd992f9909981d2290a40e6b2cc334caf2c343431b7821c3c049fd43b4fa1f126cbee3d274a7fe7ca9fd89f5256bb95419ba6a4159132f5f5ba806a83d46f88639599470291b820f7120aed00eb8e847912b3a4e26457130a775f1f8d14101794632d840da691735be0143f8822783f6c958dbc8c4e7f22198627c474cefc40226f16fb15f73dbeb59026af02e2edb200fce2f03bcd9ee30bbfdd39a4b328443df5f8dc9d76c7b994babd61e7ad971125c2a274f79824851660313206500d63a4b62d42f26911637cb6b8154f3b016ae462168aae2c82ba09bf299e6a4fa2bc3ae4c09771ac795b796fc59cb1dc601230ee626cd4b84787b45c108bc589abdd7121e8d6a73e5244a66253333d3a734f6b87d2f45047c6d8cfbe97645cd7184113b52eff12b113e0c2f2f0869db3f86231c2f11f631dd557e9aa80d291dfd0e01e7740eb657f6a6796db43cc23f209b4eb06353a0a0f45ec8545b140f582f51e31f877826a36fe792b68b2f6775038381c289996ec7e42ec5643cc84cb76a9f5f197b9594e33a509a2ad774172b5d0983987a6a5a466ea9f7e295351b75b825c6b3f0199e95e87c875e84e5f4b91ae605e960785413bb581f2a61720f0f5e88cf8f1ce31d047a7f4f2a7676861538e6855248d0538bd3e8e8e6ac11d18b01667e6e74a6f9da80edcc1a2f27e6a968afdcbde1654615032241775a5eafef1be2d68fbe1c13c9dc5a92d60ba78e91e2de80867367a2787a14214657470b119ae0cc2ad0bb19afb5dfa2a8103fa402364472c44e4e9f3c0fb9fc430e61aac5148524cb7ea0c23b91dd2e78deefa757228adb99c46101a70805fe0872fa8738105f88e7d00c5d48be26ef7c62b630c28cea44a652da939ec533a7dcb3ced4518415e030a66c0e06b650c8b2ee21edb860cea90983bceeb81289ac42317fb16e13d342ed2cfa9365c87e2b28916533c45e0fc6e1ee4e4fd4072923fd507dc745ca943c38c1a152cd2ae116206e5a0426934542286ae5a7f4f69c07b1a6bdc365e94b0d86b1fa3fc757cf31fb519c40005621663c8d7853d3c8c1a9c9edc973293dbc7f2c3bbb3ca290ac6ded5d68d989503e4f00b70d85a6023db0a5f93c0c8f681d19e36aa28e339eb1df9cc7ac3acb384926ed837b9de1cb667ba54206d4ae2e09e2ceddc55966d1b750f89cd97f60d647840ae23bec56b40d12ef819b48320509acfa273ee4f6cb526c233bb6ce3e6d1707f6172500d9a63b12d8e2a883b246ae15a79653f5b4dcc152c6d52daa03d7a7221f52acadeb5c34fb70b0073fdab672a62d183a14e55e8bf7607ef3bee1f96283a630dd9b97c490c2763c90cd6316311f5e6a14e1afbba9dfaf2cb7f2cac95c56b5d2207936ebf05542e8bb016ec5e26ecdbdffc8e24590c6ef35cdd9107f6cd377e10c409e715fb1d7306d1208261ce566561c0e3c5040102eafe2828e0f33a5dfa49fcef7fabfc6cf6f5c7828122fbd5be3c40200155158272c7f513575ed6f52b3ce2e622c87987bae99274c21b6b7ab948d561edf87809add28a03d4dfab7d42413ea6c99133eab474cc89b53acc742170605c8a146e32e87002d2b1095801051c9a75f0aec98b36a46d8691f3931d8b130d4c6a948d3330886aab9f6c96263e63590057ec90461388ff2be890c7290b014d83fb87abdca50676e6265921c7a8e19d11ceb5c847a5b063bcf31824a63a29e1659bea40d353c7d534a4d6ae772290da3b6d36376937df11976d0b98d0d21d0372f97b4b33364d663723d7efbe28aaca7db7bf1d2f86ee72bece3b249f0628472190cac78433c74216007fd0ec3b495f01565744d60ac67384d123b7c6780f75cf9e900d0352963830b7d545818319bb908ac1d130ed4efe53a707364115cf38576316e72ea17fe998d7d97e33523e8512ed079417e544041edf9cd26f38f60b67b18f7009c1420c628c992ad7e4facac07f661fcec6a839f85483a78fab2e00d3600da79506fa50200b24626b5444f12a02d14fe1539dd34d8b3d98840294f9c61bccfb1a13aa7e0c8f61d1764dcac6b8c4cdb6a3f559899636c129c33a97300ac6f477fc021293498d649886198b377bc94d18cefedb02fa9e863028dd61eb28078363a5bb11804f12e02c8dfa9cfcb83648325734aa4b129f4d39c142c9f920667735251fc1dd9154f67588ace0e1c36a9df12a4e3f9d747a1274b68e8a645bbcf35136a289f2201a978f14e97fa3e48ea3e53c8f02ad248fddc2216180a7e0ea9630c48ccbdf054a743fb552d9d8206c5e335a35729f6cfaa530e49513224a16ef097f160d6ce51119facdb934e58b12aefc67fe89c48d84886ee914251acb1595e89195bbbc90572a78d3cb8e14239cda95627f996f123b769e1bb42aa6de237bdbfcb4dea1a72d37bbdac5403ac2584fb7b08ee03334465cd6f3e6ad2750cd33ff9e14f82b3ba08fc22ee0d50c21b99080aea06f99243d2081239926d8a110578048576887a26635ac6e8b3661421498c9762dba3d69e0da0a388f481ff840e125d85daa91726cc015e2a2e0dbc8d52fbedbd6827ed0aa799db0b28e467daeaa7045f22374424a298a964769c5d191f45d8816b421602bb2686232ecf29c5fd9d61c89f53ad0fb7f9ceacb2cfe5f9f08c5b6b3fe89ad406f1446de99fa68ea33e367217789a0ecca926b2df51478a15bc6144689923e09c8e073dd2e04831c20b14ffe36ba7c63c909f202cfb6a58de6c5d6df930f63988e6c8ea204e57739830937e2693146ebbaaaf159393c94e6b892c040b9fc8043ffa7f3d0d1a7ec52c85879f39a42c0cd7134bbeeb16ea7b7ec01c5474ef07fbe481f6e5de1a86d2f602686a8f090a4499f8cd6678b51da736039d3e52bb613e0ffbaaf0385fd7d0f10b3dd20acc6cdcbb25057035500e4c5f6841b31e741c73395844f79d3eaa2bd4d2bc1ee69cb0b344200b63be9090fcac6796e20f51e13c87a5167f83291cd54f499189a96033440584062fe2ea528e492300bc6d508d91e3440dfb3c54c64d6d52de4779090dea4b6f8c127c0", 0x1000, 0x1, 0x0, 0x2, r6}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000002380)="80129227015c4052ab5b4a5925eb6b72aab0a03bbdab51a1be985ad8d843be687b2552d66dde3ea981d62beb1b9f3f047c835383ef37a8cead9e0e9a3dcd6028b65cba9a4f2f5702b728c7483b5a48e1097d843ca07d968103de48aa371beafc72044547c4c3a51f1803cc1ae8ba41000e6a74564e5ceeb286d2e34b9bda7fef3e4855cdc6c141bd54e00d29a2a537052aa6cd17c49599135d22e157f6c4642486f5a3323dfbcc31878e092cb66599dd138a1a674a0ed1d7a897844975e9dc9d5a75a5661e6ac7d2d700e30f4a90cfab1e26e50a096a8eb55747749a3316e3bf8f8e229395b10366f5603a584266aa4f6d3d", 0xf2, 0x7, 0x0, 0x3, r7}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x5, 0xd62, r1, &(0x7f0000002500)="7c56c9f60fb697700950a800745e502b6cd9c9ed1e225863e41086bad500b63222c2f67e87cc3419f425ae49047e3261eca8d77bb1aa8e2c3a79da4b9e2d8ebd338b91522e5c1897ae0a6a02765d2a906777d617c5beefe2ea3ec851fca50f505eef87c5d9147a3ca2502ce80f9ca7ae0716e2f28fab50972a9b1d2640b4dc0015ad7e5e5d94e873d15dba18", 0x8c, 0xff, 0x0, 0x0, r8}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x48af8573, r1, &(0x7f0000002640)="b619fb8b7399a5cb965fa29425ab02ebdc8f249b75f71f7a091e8290b7a9314b6fbf579f6d3201947c58f8a293597d07d289e54246732ecab17ea4effb1a88b8d65ee1163f20f4d92da0a1fa3d5b0e01049d09e5bb3e659a8b09d5c37ce3d5df25d6e4ebeee10a118fc2af45e2b5c8eaece5ec7bbfa236d422779e7d5e85ea611840b2a2", 0x84, 0x2}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x5, 0x7fff, r0, &(0x7f0000002740)="38e9c81654181cc3ea404f1ad52d391435c0aba78fa527e57c4a0b2604dd90fe9026406491de4a46bda254b053b861ad51c4eb4d7d426c05c75ee9d8a73e9d65f70efd37af0be0c64c8817456062934a123be9c7fee3bcc08f47c063fa8ddb8fa3444dd78ed07bcf7007135d82132aaaf0a54b775bb9e054a6cf6d3c97a7becb791ab0722838f998d97671cd83a716ac4d64896b8c8927fc3b2e4be2f2d6b61e74e452e05abdebdef8773f9b5b424970c0eed74125b4ee3f040324be704d186441180b6e2bbf3d03b3", 0xc9, 0x10000, 0x0, 0x1, r9}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x5cd, r0, &(0x7f00000028c0)="37c266af2a94e9cf6250b16e013dc3fa8947132c5f991dc37d5540d084c03355110f19e0ea3c74a4", 0x28, 0x5, 0x0, 0x2, 0xffffffffffffff9c}]) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(0x0) 08:05:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x4, 0x258, [0x200000c0, 0x0, 0x0, 0x2000034c, 0x200005b8], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x40, 0x8917, 'eql\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc8, 0xf8}, [@arpreply={'arpreply\x00', 0x25, {{@local, 0xfffffffffffffffc}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}]}, @snat={'snat\x00', 0xc, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'gre0\x00', 'hwsim0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@random="35f41d4489a4", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x2a8) 08:05:33 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) 08:05:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r1, r2, 0x0, 0x800000bf) [ 1273.857228][T22918] WARNING: CPU: 0 PID: 22918 at net/bridge/netfilter/ebtables.c:2161 compat_copy_entries+0x1148/0x1390 [ 1273.869123][T22918] Kernel panic - not syncing: panic_on_warn set ... [ 1273.875761][T22918] CPU: 0 PID: 22918 Comm: syz-executor.4 Not tainted 5.1.0-rc6+ #83 [ 1273.883778][T22918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.893867][T22918] Call Trace: [ 1273.897285][T22918] dump_stack+0x172/0x1f0 [ 1273.901646][T22918] ? compat_copy_entries+0x1120/0x1390 [ 1273.907126][T22918] panic+0x2cb/0x65c [ 1273.911057][T22918] ? __warn_printk+0xf3/0xf3 [ 1273.915735][T22918] ? compat_copy_entries+0x1148/0x1390 [ 1273.921382][T22918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.927662][T22918] ? __warn.cold+0x5/0x45 [ 1273.932304][T22918] ? compat_copy_entries+0x1148/0x1390 [ 1273.938049][T22918] __warn.cold+0x20/0x45 [ 1273.942323][T22918] ? compat_copy_entries+0x1148/0x1390 [ 1273.947794][T22918] report_bug+0x263/0x2b0 [ 1273.952154][T22918] do_error_trap+0x11b/0x200 [ 1273.956896][T22918] do_invalid_op+0x37/0x50 [ 1273.961353][T22918] ? compat_copy_entries+0x1148/0x1390 [ 1273.966836][T22918] invalid_op+0x14/0x20 [ 1273.971021][T22918] RIP: 0010:compat_copy_entries+0x1148/0x1390 [ 1273.978043][T22918] Code: 31 f4 ff ff e8 e9 19 37 fb 0f 0b bb ea ff ff ff e9 20 f4 ff ff e8 d8 19 37 fb 31 f6 31 ff e8 4f 1b 37 fb eb a1 e8 c8 19 37 fb <0f> 0b eb 98 48 89 cf e8 ac 2f 6f fb e9 9e f7 ff ff 48 8b bd 20 ff [ 1273.997840][T22918] RSP: 0018:ffff888062ccf918 EFLAGS: 00010212 [ 1274.003945][T22918] RAX: 0000000000040000 RBX: 000000000000000f RCX: ffffc9000e667000 [ 1274.011943][T22918] RDX: 0000000000000814 RSI: ffffffff86397328 RDI: 0000000000000005 [ 1274.019927][T22918] RBP: ffff888062ccfa90 R08: ffff88802fa12440 R09: ffffed1042c9f287 [ 1274.027913][T22918] R10: ffffed1042c9f286 R11: ffff8882164f9437 R12: ffff888062ccfaf0 [ 1274.035997][T22918] R13: 0000000000000000 R14: 0000000000000258 R15: 0000000000000258 [ 1274.044015][T22918] ? compat_copy_entries+0x1148/0x1390 [ 1274.049485][T22918] ? compat_copy_entries+0x1148/0x1390 [ 1274.054978][T22918] ? compat_table_info+0x670/0x670 [ 1274.060111][T22918] ? vmalloc+0x6b/0x90 [ 1274.064191][T22918] ? xt_compat_init_offsets+0x111/0x260 [ 1274.069741][T22918] ? xt_compat_init_offsets+0x1d9/0x260 [ 1274.075325][T22918] compat_do_replace+0x3b3/0x680 [ 1274.080618][T22918] ? refcount_dec_not_one+0x1f0/0x1f0 [ 1274.085998][T22918] ? do_ebt_set_ctl+0x110/0x110 [ 1274.091295][T22918] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1274.097722][T22918] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1274.104753][T22918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1274.111013][T22918] ? ns_capable_common+0x93/0x100 [ 1274.116055][T22918] compat_do_ebt_set_ctl+0x229/0x278 [ 1274.121348][T22918] ? compat_do_replace+0x680/0x680 [ 1274.126473][T22918] ? wait_for_completion+0x440/0x440 [ 1274.131794][T22918] ? mutex_unlock+0xd/0x10 [ 1274.136222][T22918] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 1274.142306][T22918] compat_nf_setsockopt+0x9b/0x140 [ 1274.147418][T22918] ? compat_do_replace+0x680/0x680 [ 1274.152555][T22918] compat_ip_setsockopt+0x106/0x140 [ 1274.157770][T22918] compat_udp_setsockopt+0x68/0xb0 [ 1274.162900][T22918] compat_sock_common_setsockopt+0xb4/0x150 [ 1274.169245][T22918] ? udp_lib_setsockopt+0x9c0/0x9c0 [ 1274.174462][T22918] __compat_sys_setsockopt+0x181/0x380 [ 1274.180023][T22918] ? sock_common_setsockopt+0xe0/0xe0 [ 1274.185423][T22918] ? compat_sock_get_timestampns+0x220/0x220 [ 1274.191422][T22918] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1274.196907][T22918] ? do_fast_syscall_32+0xd1/0xc98 [ 1274.202033][T22918] ? entry_SYSENTER_compat+0x70/0x7f [ 1274.207352][T22918] ? do_fast_syscall_32+0xd1/0xc98 [ 1274.212571][T22918] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 1274.218387][T22918] do_fast_syscall_32+0x281/0xc98 [ 1274.223445][T22918] entry_SYSENTER_compat+0x70/0x7f [ 1274.228589][T22918] RIP: 0023:0xf7f95869 [ 1274.232770][T22918] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1274.253093][T22918] RSP: 002b:00000000f5d910cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1274.261535][T22918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1274.269535][T22918] RDX: 0000000000000080 RSI: 0000000020000640 RDI: 00000000000002a8 [ 1274.277533][T22918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.285532][T22918] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1274.293972][T22918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.303197][T22918] Kernel Offset: disabled [ 1274.307985][T22918] Rebooting in 86400 seconds..