[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. 2020/08/12 23:21:22 fuzzer started 2020/08/12 23:21:22 dialing manager at 10.128.0.26:33943 2020/08/12 23:21:22 syscalls: 3274 2020/08/12 23:21:22 code coverage: enabled 2020/08/12 23:21:22 comparison tracing: enabled 2020/08/12 23:21:22 extra coverage: enabled 2020/08/12 23:21:22 setuid sandbox: enabled 2020/08/12 23:21:22 namespace sandbox: enabled 2020/08/12 23:21:22 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/12 23:21:22 fault injection: enabled 2020/08/12 23:21:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/12 23:21:22 net packet injection: enabled 2020/08/12 23:21:22 net device setup: enabled 2020/08/12 23:21:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/12 23:21:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/12 23:21:22 USB emulation: enabled 2020/08/12 23:21:22 hci packet injection: enabled 23:23:56 executing program 0: 23:23:57 executing program 1: 23:23:57 executing program 2: 23:23:57 executing program 3: 23:23:57 executing program 4: 23:23:57 executing program 5: syzkaller login: [ 211.967124][ T6877] IPVS: ftp: loaded support on port[0] = 21 [ 212.117813][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 212.220661][ T6879] IPVS: ftp: loaded support on port[0] = 21 [ 212.301008][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.309891][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.320570][ T6877] device bridge_slave_0 entered promiscuous mode [ 212.332049][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.342282][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.351338][ T6877] device bridge_slave_1 entered promiscuous mode [ 212.408205][ T6881] IPVS: ftp: loaded support on port[0] = 21 [ 212.413129][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.453835][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.575160][ T6883] IPVS: ftp: loaded support on port[0] = 21 [ 212.607762][ T6877] team0: Port device team_slave_0 added [ 212.675835][ T6877] team0: Port device team_slave_1 added [ 212.892396][ T6885] IPVS: ftp: loaded support on port[0] = 21 [ 212.897509][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 212.910368][ T6887] IPVS: ftp: loaded support on port[0] = 21 [ 212.930461][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.937785][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.963831][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.978916][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.985997][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.012436][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.160915][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 213.253532][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.265758][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.273425][ T6879] device bridge_slave_0 entered promiscuous mode [ 213.297724][ T6877] device hsr_slave_0 entered promiscuous mode [ 213.308492][ T6877] device hsr_slave_1 entered promiscuous mode [ 213.329808][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.337016][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.347149][ T6879] device bridge_slave_1 entered promiscuous mode [ 213.401505][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.493469][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.599487][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.607573][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.615745][ T6881] device bridge_slave_0 entered promiscuous mode [ 213.630307][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 213.677798][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.686464][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.694114][ T6881] device bridge_slave_1 entered promiscuous mode [ 213.708881][ T6885] chnl_net:caif_netlink_parms(): no params data found [ 213.721062][ T6879] team0: Port device team_slave_0 added [ 213.759691][ T6879] team0: Port device team_slave_1 added [ 213.898350][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.914318][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.921412][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.948729][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.963840][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.970929][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.997502][ T17] Bluetooth: hci0: command 0x0409 tx timeout [ 214.004092][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.039393][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.049557][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 214.129980][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.139477][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.148622][ T6883] device bridge_slave_0 entered promiscuous mode [ 214.174032][ T6881] team0: Port device team_slave_0 added [ 214.212749][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.220170][ T7787] Bluetooth: hci1: command 0x0409 tx timeout [ 214.227746][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.238082][ T6883] device bridge_slave_1 entered promiscuous mode [ 214.249998][ T6879] device hsr_slave_0 entered promiscuous mode [ 214.257732][ T6879] device hsr_slave_1 entered promiscuous mode [ 214.266138][ T6879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.273963][ T6879] Cannot create hsr debugfs directory [ 214.281787][ T6881] team0: Port device team_slave_1 added [ 214.300460][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.308141][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.316659][ T6885] device bridge_slave_0 entered promiscuous mode [ 214.342111][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.373704][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.384632][ T7595] Bluetooth: hci2: command 0x0409 tx timeout [ 214.390746][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.400663][ T6885] device bridge_slave_1 entered promiscuous mode [ 214.419294][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.446495][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.454121][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.481400][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.517070][ T6877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.534679][ T7595] Bluetooth: hci3: command 0x0409 tx timeout [ 214.540351][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.553042][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.580518][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.595648][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.619663][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.629554][ T6877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.645164][ T6883] team0: Port device team_slave_0 added [ 214.651258][ T6877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.694498][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 214.704221][ T6877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.729180][ T6883] team0: Port device team_slave_1 added [ 214.750722][ T6885] team0: Port device team_slave_0 added [ 214.761756][ T6885] team0: Port device team_slave_1 added [ 214.779938][ T6881] device hsr_slave_0 entered promiscuous mode [ 214.786670][ T6881] device hsr_slave_1 entered promiscuous mode [ 214.793204][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.801378][ T6881] Cannot create hsr debugfs directory [ 214.807252][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.818927][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.826859][ T6887] device bridge_slave_0 entered promiscuous mode [ 214.854487][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 214.873095][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.881944][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.890808][ T6887] device bridge_slave_1 entered promiscuous mode [ 214.938290][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.945610][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.972779][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.991105][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.998122][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.030013][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.051795][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.059024][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.085614][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.121464][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.128524][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.156641][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.200267][ T6885] device hsr_slave_0 entered promiscuous mode [ 215.209904][ T6885] device hsr_slave_1 entered promiscuous mode [ 215.216990][ T6885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.225129][ T6885] Cannot create hsr debugfs directory [ 215.232711][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.296687][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.365360][ T6883] device hsr_slave_0 entered promiscuous mode [ 215.375961][ T6883] device hsr_slave_1 entered promiscuous mode [ 215.382488][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.392147][ T6883] Cannot create hsr debugfs directory [ 215.427700][ T6879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.445918][ T6887] team0: Port device team_slave_0 added [ 215.466168][ T6879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.477028][ T6879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.489298][ T6887] team0: Port device team_slave_1 added [ 215.530871][ T6879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.570585][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.579218][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.607068][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.623166][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.630885][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.658762][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.777551][ T6887] device hsr_slave_0 entered promiscuous mode [ 215.785992][ T6887] device hsr_slave_1 entered promiscuous mode [ 215.792536][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.801817][ T6887] Cannot create hsr debugfs directory [ 215.886714][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.936917][ T6881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.980534][ T6881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.007421][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.016148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.037583][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.045153][ T6881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.075199][ T2716] Bluetooth: hci0: command 0x041b tx timeout [ 216.099717][ T6881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.120690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.143880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.155467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.162716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.195784][ T6885] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.218088][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.226634][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.235818][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.245602][ T2716] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.252664][ T2716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.261595][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.286115][ T6885] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.302483][ T12] Bluetooth: hci1: command 0x041b tx timeout [ 216.320665][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.374888][ T6885] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.396312][ T6883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.411964][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.421232][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.438190][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.447452][ T6885] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.461923][ T7787] Bluetooth: hci2: command 0x041b tx timeout [ 216.478989][ T6883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.514460][ T6883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.527440][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.539067][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.569178][ T6887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.577814][ T6883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.609338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.618065][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.633737][ T6877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.635066][ T17] Bluetooth: hci3: command 0x041b tx timeout [ 216.653013][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.666134][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.679247][ T6887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.690172][ T6887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.714940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.723548][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.759965][ T6887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.774499][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 216.786640][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.794851][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.802315][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.810972][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.822501][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.835741][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.892456][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.901385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.910105][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.917259][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.925857][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.934718][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.934965][ T2716] Bluetooth: hci5: command 0x041b tx timeout [ 216.943196][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.955849][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.977348][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.006424][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.015363][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.025664][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.037740][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.046801][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.078155][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.086494][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.096305][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.141301][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.150585][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.161907][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.172082][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.182106][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.191101][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.200339][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.208594][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.224354][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.232889][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.242565][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.251390][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.266826][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.277966][ T6877] device veth0_vlan entered promiscuous mode [ 217.296036][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.324155][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.332968][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.346859][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.354046][ T7787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.364860][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.373484][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.385920][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.392992][ T7787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.431187][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.438753][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.461747][ T6877] device veth1_vlan entered promiscuous mode [ 217.490795][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.522485][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.537071][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.547590][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.558879][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.568201][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.578490][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.591480][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.618159][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.639024][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.648051][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.657766][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.666129][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.683387][ T6881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.696554][ T6881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.712104][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.724537][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.739398][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.748146][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.757319][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.767776][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.786690][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.829541][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.840708][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.851543][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.861923][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.874412][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.882954][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.890118][ T7787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.899917][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.909120][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.918307][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.925434][ T7787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.933203][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.943770][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.951530][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.985109][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.009791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.018562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.027798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.037792][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.047287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.059364][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.067824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.075513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.084642][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.093192][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.102371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.109496][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.117786][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.126283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.136738][ T6877] device veth0_macvtap entered promiscuous mode [ 218.147053][ T8159] Bluetooth: hci0: command 0x040f tx timeout [ 218.159695][ T6877] device veth1_macvtap entered promiscuous mode [ 218.176586][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.186325][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.197655][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.206346][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.215021][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.225989][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.234419][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.243002][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.252552][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.276018][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.310178][ T6879] device veth0_vlan entered promiscuous mode [ 218.320940][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.332342][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.341708][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.348840][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.356884][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.366237][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.375512][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.382559][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.383820][ T12] Bluetooth: hci1: command 0x040f tx timeout [ 218.390687][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.405917][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.414904][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.423990][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.432580][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.441931][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.450667][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.459665][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.468541][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.482887][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.504581][ T6877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.513451][ T6877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.530176][ T6877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.540231][ T6877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.543790][ T12] Bluetooth: hci2: command 0x040f tx timeout [ 218.557043][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.575219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.583145][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.592991][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.602284][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.612304][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.621449][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.630864][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.639980][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.648935][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.657646][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.672021][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.693334][ T6879] device veth1_vlan entered promiscuous mode [ 218.693983][ T7595] Bluetooth: hci3: command 0x040f tx timeout [ 218.721102][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.730112][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.739663][ T2716] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.746836][ T2716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.756356][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.765398][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.806635][ T6883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.815865][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.826398][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.856140][ T17] Bluetooth: hci4: command 0x040f tx timeout [ 218.884233][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.891756][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.902277][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.937650][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.947799][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.971983][ T6881] device veth0_vlan entered promiscuous mode 23:24:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xffffff80, 0x178, 0x36003203, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'lo\x00', 'netpci0\x00'}, 0x0, 0x130, 0x1a0, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x8000009, 0x401}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "42c2f7ce28ef401335ddf6fb395bf4a4d216cfa5e921b6e919ef8a0d6093c6bcee49d7b46af988d8931f15a247cd97ebe28f918333489d8bc10f975c5989ee00"}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'geneve1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$KDDISABIO(r1, 0x4b37) [ 219.014247][ T7787] Bluetooth: hci5: command 0x040f tx timeout [ 219.030839][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.057852][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.071874][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.088485][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.100304][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.110322][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.194865][ T6879] device veth0_macvtap entered promiscuous mode [ 219.206821][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.223124][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.250576][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.286245][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.311917][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.341189][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.368693][ C0] hrtimer: interrupt took 43662 ns [ 219.370248][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.398799][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 23:24:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xffffff80, 0x178, 0x36003203, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'lo\x00', 'netpci0\x00'}, 0x0, 0x130, 0x1a0, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x8000009, 0x401}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "42c2f7ce28ef401335ddf6fb395bf4a4d216cfa5e921b6e919ef8a0d6093c6bcee49d7b46af988d8931f15a247cd97ebe28f918333489d8bc10f975c5989ee00"}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'geneve1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$KDDISABIO(r1, 0x4b37) [ 219.416963][ T6879] device veth1_macvtap entered promiscuous mode [ 219.436794][ T6881] device veth1_vlan entered promiscuous mode 23:24:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xffffff80, 0x178, 0x36003203, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'lo\x00', 'netpci0\x00'}, 0x0, 0x130, 0x1a0, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x8000009, 0x401}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "42c2f7ce28ef401335ddf6fb395bf4a4d216cfa5e921b6e919ef8a0d6093c6bcee49d7b46af988d8931f15a247cd97ebe28f918333489d8bc10f975c5989ee00"}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'geneve1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$KDDISABIO(r1, 0x4b37) [ 219.518222][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.542222][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.567172][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.580815][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.597489][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.607434][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:24:05 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000cf77b326243940944fa85693ac246e9491a33f2842262a2a220a3d8bdcf09e6874bf5ca7efa312396e1395c4f5af8dfc172d858880eb9102c4890d649c0053702d9fd73927ed72ff071913dd08cc3386b877e6765017ccbe1031a95a65d695d915ae27a8b470c527b56f03c7b069289e243ff6f32b1530fae67435ff8e6970216ff3c23e40ded1e4b5a4ef933aabc7146bfa5e58a7b67624a13191c6b77120da7c41a0016840edfa4e801a2876ac5bad9be71382f2ac72437e7c8818ffecfca00bca3679efacddc7116d447504a46af2f792520cd2d38d302e09289d54a1876538d6975b7cda2ca85a016b4e"]}) [ 219.618767][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.647506][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.721663][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.745834][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.765464][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.831608][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.841415][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.852025][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.861581][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.871058][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.879662][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.891126][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.909545][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.921592][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.945309][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.956685][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.966065][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.975618][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.987727][ T6879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.997796][ T6879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.006974][ T6879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.018570][ T6879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.040206][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.052841][ T6881] device veth0_macvtap entered promiscuous mode [ 220.060095][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 220.090402][ T6881] device veth1_macvtap entered promiscuous mode [ 220.098854][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.108666][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.117767][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.127078][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.156332][ T6885] device veth0_vlan entered promiscuous mode [ 220.171823][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.184373][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.194626][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.206024][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.216330][ T2716] Bluetooth: hci0: command 0x0419 tx timeout [ 220.224323][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.242106][ T6883] device veth0_vlan entered promiscuous mode [ 220.249996][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.258471][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.267526][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.276762][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.285604][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.294423][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.303914][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 220.320417][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.334118][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.352775][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.363881][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.375519][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.382851][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.392072][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.400056][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.408105][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.416052][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.424829][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.450699][ T6883] device veth1_vlan entered promiscuous mode [ 220.458362][ T8221] Bluetooth: hci1: command 0x0419 tx timeout [ 220.463497][ T17] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.479992][ T6885] device veth1_vlan entered promiscuous mode [ 220.506333][ T6881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.519247][ T6881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.543475][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 23:24:06 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x300080, 0x0) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951360d3fa985503f8f45bfb4e9240b985dda11bde27881f17233d3ad01f2fa45ab85cba9419e044811bec22fa10145087410b8316fd4bd2609b93ecbb57d271ac43da63d86ea6e3209119cb4890b5312631d87c2297dc674458dc4b"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) iopl(0x0) openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={0x200, 0x0, 0x1}, 0x18) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) [ 220.545594][ T6881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.574569][ T6881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.634161][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.642376][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.659769][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.668804][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.677779][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.687689][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.733589][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.739886][ T8221] Bluetooth: hci2: command 0x0419 tx timeout [ 220.742694][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.742725][ T17] usb 1-1: Product: syz [ 220.766695][ T8227] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.776988][ T8227] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.785752][ T8227] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.794500][ T8227] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.803624][ T8159] Bluetooth: hci3: command 0x0419 tx timeout [ 220.820376][ T8227] device vxlan0 entered promiscuous mode [ 220.823258][ T17] usb 1-1: Manufacturer: syz [ 220.831608][ T8227] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.840975][ T8227] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.843502][ T17] usb 1-1: SerialNumber: syz [ 220.849885][ T8227] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.863362][ T8227] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.933765][ T8159] Bluetooth: hci4: command 0x0419 tx timeout [ 221.072277][ T6885] device veth0_macvtap entered promiscuous mode [ 221.082869][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.091712][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.100903][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.109674][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.118576][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.133855][ T7787] Bluetooth: hci5: command 0x0419 tx timeout [ 221.152717][ T6887] device veth0_vlan entered promiscuous mode [ 221.163741][ T7787] usb 1-1: USB disconnect, device number 2 [ 221.170754][ T6885] device veth1_macvtap entered promiscuous mode [ 221.185034][ T6883] device veth0_macvtap entered promiscuous mode [ 221.199955][ T6883] device veth1_macvtap entered promiscuous mode 23:24:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x10402, 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)={0xc5, 0x29, 0x2, {0x2, [{{0x40, 0x0, 0x8}, 0x2, 0xc7, 0x7, './file0'}, {{0x1, 0x4}, 0x1, 0x6, 0x7, './file0'}, {{0x2, 0x3}, 0x3, 0x8, 0x7, './file0'}, {{0x10, 0x3, 0x4}, 0x7, 0x4, 0x7, './file0'}, {{0x0, 0x3, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x1, 0x4}, 0x4, 0x81, 0x7, './file0'}]}}, 0xc5) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xea32}]}, 0x60}}, 0x4804) r6 = gettid() tkill(r6, 0x33) sched_getattr(r6, &(0x7f0000000200)={0x38}, 0x38, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x738}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x401}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x4000040) [ 221.260008][ T6887] device veth1_vlan entered promiscuous mode [ 221.313474][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.328283][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 23:24:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a480e600d00000009001e00010040d5ae7d0200ff05", 0x26}], 0x1}, 0x0) [ 221.360641][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.378124][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.390219][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.427048][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.449238][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.474975][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.485519][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.497069][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.507539][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.518607][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.540148][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.580690][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.594989][ T8250] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.603752][ T8250] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.612456][ T8250] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.621267][ T8250] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 23:24:07 executing program 1: r0 = syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x7c60, &(0x7f0000000000)={0x0, 0xabaa, 0x0, 0x1, 0x18e}, &(0x7f00005ec000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x10000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup3(r5, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x7fff) r7 = socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 221.630349][ T8250] device vxlan0 entered promiscuous mode [ 221.640512][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.656255][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.699387][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.708639][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.724907][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.745019][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.753024][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.765029][ T8261] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 221.791744][ T8252] device bridge0 entered promiscuous mode 23:24:08 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x200, @mcast1, 0xfffffff7}, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, [], 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x3f, @loopback, 0x6}], 0x90) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}]}) r2 = gettid() tkill(r2, 0x33) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r5, 0x3, 0xa, [0x58b5, 0x5, 0x4, 0x3, 0x8000, 0xed, 0x1, 0x101, 0x7, 0xe189]}, &(0x7f0000000340)=0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r6, 0x3}, &(0x7f00000003c0)=0x8) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto(r7, &(0x7f0000000400)="a04589c00a9658915e012da6fcb4486f10f19855", 0x14, 0x80c4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) rt_tgsigqueueinfo(r2, r8, 0x36, &(0x7f0000000280)={0x1, 0x80, 0x5}) [ 221.923000][ T2595] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 221.986268][ T8255] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.010485][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.019726][ T8255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.031078][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.040223][ T8255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.183258][ T2595] usb 1-1: Using ep0 maxpacket: 32 [ 222.199549][ T8255] syz-executor.2 (8255) used greatest stack depth: 22664 bytes left [ 222.265092][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.272366][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.343146][ T2595] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.367123][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.379269][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.392402][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.404268][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.426465][ T2595] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.472789][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.512702][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.544341][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.551786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.581952][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.595349][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.606176][ T2595] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.616170][ T2595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.626164][ T2595] usb 1-1: Product: syz [ 222.630345][ T2595] usb 1-1: Manufacturer: syz [ 222.631965][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.636751][ T2595] usb 1-1: SerialNumber: syz [ 222.662777][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.662786][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.662800][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.662807][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.662821][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.662828][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.664777][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.751729][ T6887] device veth0_macvtap entered promiscuous mode [ 222.792433][ T2595] usb 1-1: USB disconnect, device number 3 [ 222.825170][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.844858][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.861278][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.872131][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.890117][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.904064][ T6887] device veth1_macvtap entered promiscuous mode [ 222.935578][ T6885] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.946529][ T6885] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.955654][ T6885] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.965769][ T6885] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.976905][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.992798][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.008166][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.021867][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.033707][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.044642][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.054978][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.066062][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.077713][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.107698][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.116704][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.129038][ T6883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.139745][ T6883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.149173][ T6883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.157976][ T6883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.200960][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.211540][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.222962][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.233985][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.245019][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.257495][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.267433][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.277961][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.287840][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.298369][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.309749][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.333912][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.348512][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.359353][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.373901][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.384513][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.395592][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.406045][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.417368][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.420388][ T0] NOHZ: local_softirq_pending 08 [ 223.427855][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.442947][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.452880][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.463436][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.476384][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.503194][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.519439][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.533003][ T6887] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.541787][ T6887] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.551623][ T6887] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.560431][ T6887] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:24:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') open(&(0x7f0000001340)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r0, 0x0, 0x8080ffffff7e) 23:24:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) 23:24:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x2, 0x10003, "44580a9d7e6af43c38f2e7cf39038d8db29c11636ecd26c2", {0x7, 0xff}, 0xf}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000080)={0x80000001, "39bb18abad12de80dffa362c6d1c21d092ea4e676827cb26446b6c1d9e6917ba", 0x1, 0x1}) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) splice(r1, 0x0, r3, 0x0, 0x1ffeb, 0x0) 23:24:10 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000cf77b326243940944fa85693ac246e9491a33f2842262a2a220a3d8bdcf09e6874bf5ca7efa312396e1395c4f5af8dfc172d858880eb9102c4890d649c0053702d9fd73927ed72ff071913dd08cc3386b877e6765017ccbe1031a95a65d695d915ae27a8b470c527b56f03c7b069289e243ff6f32b1530fae67435ff8e6970216ff3c23e40ded1e4b5a4ef933aabc7146bfa5e58a7b67624a13191c6b77120da7c41a0016840edfa4e801a2876ac5bad9be71382f2ac72437e7c8818ffecfca00bca3679efacddc7116d447504a46af2f792520cd2d38d302e09289d54a1876538d6975b7cda2ca85a016b4e"]}) 23:24:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x98, 0x15, 0x0, 0x70bd25, 0x25dfdbff, {0x2c, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x82, 0x1, "4349c6f58045ccf44e32e08f8785e0f780e0fbe71b07d5c232891331d110af6bb20eb0e6aaa3aac516a28ce805c8c7aa3e73a17c2b7053bf708be6dfc1afff0d64659dce6feb9307889a6b5d16938704ea896bbc1933548c0b32345ffc7bdd35413f6ae69563a3c15e08b4ffd53f94f3d7447880a613ca422cc103f96917"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) chown(0x0, r2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)={[{@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}], [{@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r2}}, {@smackfshat={'smackfshat', 0x3d, '%9]'}}, {@dont_measure='dont_measure'}, {@hash='hash'}]}) r3 = gettid() tkill(r3, 0x33) r4 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x1, 0x0, 0x0, r2, 0xffffffffffffffff, 0x41, 0x8000}, 0x0, 0x0, 0x7fff, 0x1, 0x493f, 0x3a, 0xffffffffffffff5d, 0x0, 0x8, 0x3, r3, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) write$cgroup_int(r6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xa0c080, 0x0) close(r6) 23:24:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a480e600d00000009001e00010040d5ae7d0200ff05", 0x26}], 0x1}, 0x0) 23:24:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) 23:24:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MTU={0x8, 0x4, 0x7fff}]}, 0x48}}, 0x0) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) chown(0x0, r2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="78696e6f3d6175746f2c776f726b6469723d2e2f66696c65302c6e66735f6578706f72743d6f66662c776f726b6469723d2e0f66696cac2e1bec548b50fd9bd451e951476530c80cf10bb3c0387166662c72656469726563745f6469723d2e2f66696c65312c00745f7065726d697373696f6e732c61707072616973652c6659885127746578743d726f6f742c646f6e745f61707072616973652c7569643e00", @ANYRESDEC=r2, @ANYBLOB=',smackfshat=%9],dont_measure,hash,\x00']) syz_mount_image$exfat(&(0x7f0000000080)='exfat\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x5, &(0x7f0000000480)=[{&(0x7f0000000180)="e71f5b44814ec223fa93383a03e906f6a70e40f8cc28929715c4a6f1d72de477863ee04d6642d44ace5aa2bf1e6af789747428dee52c93de9bca0e980fcac366f410f1e256e91a3e8c69d9664c14457a3ba24e53b2c4a096d3889c205fcef21b319e3540d8b7be382cfc711d59b0b0faedda923aad1d986a4c4d453ea803520cab91755774e3539a", 0x88, 0x800}, {&(0x7f0000000240)="bad2b8684b67f494d475ce2983350dd863b2e48a274542c5b8076165da04cee62d299f1dd4538f69c643532b254a39b6019fd3ea614ac89ac275d593f61e181b5f2c156d69db910f2955600bcf59e26534", 0x51, 0x7fff}, {&(0x7f00000002c0)="5a2b885620c47e43bff6b501da06827ed467a120cd67fff5c86ae8a375293870c8eb58f040b4aa8fa286412cdd983c241e745a904f16441dcf47133d80115dc3644d51dacc486c9955fd97752333cbb60136abe7df0dfcbecc07e60be6bb73b4965d10fee43581bd5c783eb076fce5fda98a844dd9e7449fccc6f0d402ba68421596eae10039f2c54c621ea5ca650747ad0fa27530", 0x95, 0x9}, {&(0x7f0000000380)="a80cff2ecc40b18b993521adb4ba8eeaff48182166dc4785ff3c9b6c50b9ee0264676d482a30cce4d9e619eb2861cd0d1ad0aa6a5bb2e031a09f5df5069ab0e4b92570f27a0c0f03633df9e81474364ec0044b37778c37b7c7aad6e73be752db5b856c547f1a7972bf31d0260ba1e61318a12dbe24ad3754ce9dc82425326732ec197f138e18f0a43ebdcdd270c98e2590f1a1ad25d9", 0x96, 0x5}, {&(0x7f0000000440)="a82973c01e0fe897a35b1823a6fe0ffba924325a3dfc87e1b2", 0x19, 0x2}], 0x20c800, &(0x7f0000000600)={[{@codepage={'codepage', 0x3d, 'cp861'}}, {@discard='discard'}, {@dmask={'dmask', 0x3d, 0x400}}, {@gid={'gid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}], [{@hash='hash'}, {@dont_hash='dont_hash'}]}) [ 223.999942][ T8316] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.039279][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state 23:24:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) [ 224.048039][ T8316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.060038][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.068733][ T8316] bridge0: port 1(bridge_slave_0) entered forwarding state 23:24:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, 0x0, 0x4240a2a0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000480)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000340)=""/113, 0x71}], 0x4, &(0x7f00000003c0)=""/133, 0x85}, 0x1) r6 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10) splice(r2, 0x0, r4, 0x0, 0x30009, 0x0) [ 224.150235][ T8323] exfat: Deprecated parameter 'codepage' [ 224.182115][ T8323] exfat: Bad value for 'codepage' [ 224.263529][ T8321] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 224.272610][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 224.287154][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.306455][ T8327] exfat: Deprecated parameter 'codepage' 23:24:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) 23:24:10 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x50, 0x140c, 0x701, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050021684007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000040000000a000100626173696300000028000200240002800800010024ae0000180002801400010000000700000000000000000000002a00"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 224.312130][ T8327] exfat: Bad value for 'codepage' 23:24:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x4}]}, 0x18}}, 0x40d0) 23:24:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) [ 224.461939][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.516713][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.562383][ T12] usb 1-1: Using ep0 maxpacket: 32 23:24:10 executing program 3: r0 = gettid() tkill(r0, 0x33) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000001}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) close(r1) [ 224.742518][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.823227][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 225.032339][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 225.041413][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.062798][ T12] usb 1-1: Product: syz [ 225.067001][ T12] usb 1-1: Manufacturer: syz [ 225.071576][ T12] usb 1-1: SerialNumber: syz [ 225.379667][ T8184] usb 1-1: USB disconnect, device number 4 23:24:12 executing program 2: pipe(0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8800) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = pkey_alloc(0x0, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x9d0000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a0914, 0x64, [], @value=0x3}}) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, r1) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x80000, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) fchdir(0xffffffffffffffff) unshare(0x40000000) 23:24:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 23:24:12 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x803, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) write$rfkill(r3, &(0x7f0000000200)={0x30, 0x3, 0x3, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0xbc, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0x17}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xd3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xbc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) chown(0x0, r4, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)={[{@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}], [{@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r4}}, {@smackfshat={'smackfshat', 0x3d, '%9]'}}, {@dont_measure='dont_measure'}, {@hash='hash'}]}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, 0x0, r6) lchown(&(0x7f0000000040)='./file0\x00', r4, r6) 23:24:12 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x8, 0x7}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x28683) 23:24:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x10000008, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x6000, 0x9000}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r6}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 226.019698][ T8377] IPVS: ftp: loaded support on port[0] = 21 23:24:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x20000001) r1 = socket$netlink(0x10, 0x3, 0x19) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x60}}, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000340)=0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 23:24:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 23:24:12 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x8, 0x7}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x28683) 23:24:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x2, 0x8, 0x3}, 0x14}}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x9c602) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, [0x9, 0x7, 0x100000001, 0x8]}) 23:24:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 226.629958][ T8418] IPVS: ftp: loaded support on port[0] = 21 23:24:13 executing program 2: pipe(0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8800) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = pkey_alloc(0x0, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x9d0000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a0914, 0x64, [], @value=0x3}}) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, r1) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x80000, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) fchdir(0xffffffffffffffff) unshare(0x40000000) 23:24:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x140d, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000700f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 23:24:13 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x20000001) r1 = socket$netlink(0x10, 0x3, 0x19) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x60}}, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000340)=0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 23:24:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x20000001) r1 = socket$netlink(0x10, 0x3, 0x19) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x60}}, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000340)=0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) [ 227.208330][ T180] tipc: TX() has been purged, node left! [ 227.293043][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:24:13 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 227.403479][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:24:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff}, 0x0, 0xbfffffffffff7fff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74f, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffff7fff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup2(r2, r5) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r1, 0x0, r5, 0x3bd, 0x80000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d003f00632f77fbac14140de934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x1f, &(0x7f0000000000), &(0x7f0000000040)="afea4521af6761f5f1f687fa816461fb5770280104000000000000dae9faf2"}, 0x40) 23:24:13 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)={0xd0, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x20}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff5}, {0x6, 0x11, 0x401}, {0x8, 0x15, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000050}, 0x880) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000500)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xa8688bc87433540a, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f00000002c0)='./bus\x00') r3 = creat(&(0x7f00000007c0)='./file1\x00', 0xe2) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x8, 0x1, 0x9, 0xff, 0x0, 0x100000001, 0x10000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x50733, 0x7f, 0x4, 0x4, 0x5, 0x101, 0x82}, r0, 0x5, r2, 0x9) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000600000000000000", @ANYRES32=r3, @ANYBLOB="000000000600"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00@\x00'/28, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r7, @ANYBLOB='\x00'/28, @ANYRES32=r5, @ANYBLOB="000000000500000000d868efae00"/28, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x009\x00'/28]) getpid() 23:24:13 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffff1f}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f00000001c0)) dup3(r3, r1, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x516d7}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000633825a435c1e8734cf3b18ba48ccb"]) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 23:24:15 executing program 2: pipe(0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8800) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = pkey_alloc(0x0, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x9d0000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a0914, 0x64, [], @value=0x3}}) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, r1) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x80000, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) fchdir(0xffffffffffffffff) unshare(0x40000000) 23:24:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) 23:24:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:15 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, "3d750000001000000000000000f6ff00"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0x8005) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6ded) 23:24:15 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() tkill(r2, 0x33) r3 = getpgrp(r2) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x3, 0x40, 0x3, 0xcd, 0x0, 0x40, 0xc6a07, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0xff, 0x4}, 0x590, 0x5, 0x1800000, 0x3, 0x5, 0x8, 0x1}, r3, 0xb, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r6}, 0x14) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 23:24:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0xf603ef1762267f9c, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup3(r2, r3, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [], [{0x800, 0x8, 0x4, 0xdbdc, 0x0, 0x5}, {0x3, 0x10000, 0x4, 0x8001, 0x34, 0x7855}]}) socket$inet_tcp(0x2, 0x1, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\v\b', 0x0, '\x00\x00?'}, "ccbfc12abc282c27820fd9118600820e000600000004000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) [ 229.569241][ T180] tipc: TX() has been purged, node left! 23:24:15 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) write$9p(r0, &(0x7f0000000140)="4a9d20579a7ca4fbd5ac2ee8ee635d2368bb4301fbed7434985b3926802bd5c65fff64a1a40685c85ccf", 0x2a) r1 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2d, &(0x7f0000000000), 0x20a154cc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x9, 0x100, 0x6, 0x800, 0x6, 0x44a, 0x15, 0x2}}) 23:24:15 executing program 0: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r0 = socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) socket(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x80805, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$revoke(0x3, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)={{0x3, 0x0, @descriptor="0a99c7fc18bee70b"}, 0x41, 0x0, [], "a11d961a7b9447deea91808b541e31bb327070a20fcc330df687e8de804de1671f507a8433c79074dd8d415820dba5b3ded91610f383d069a59974356d6ac346fa"}) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r4, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='user\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r4, ':chain\x00'}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd2042040000000200", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"}) 23:24:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 229.873781][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.884866][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 229.895434][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.906375][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 229.931838][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.942791][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 229.958010][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.968954][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 229.979186][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.990141][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 230.004829][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.015743][ C0] Buffer I/O error on dev loop0, logical block 0, async page read 23:24:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 230.026645][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.037589][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 230.053331][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.064237][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 230.073708][ T8562] ldm_validate_partition_table(): Disk read failed. 23:24:16 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 230.093176][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.104314][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 230.120107][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.131204][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 230.186315][ T8562] Dev loop0: unable to read RDB block 0 [ 230.196030][ T8562] loop0: unable to read partition table [ 230.232674][ T8562] loop_reread_partitions: partition scan of loop0 (@‹ܸ¤Ì¥%2xZì¦?h2’~*‰2¶l¦: àQGJµÁR†ý B) failed (rc=-5) 23:24:16 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:18 executing program 2: pipe(0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8800) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = pkey_alloc(0x0, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x9d0000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a0914, 0x64, [], @value=0x3}}) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, r1) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x80000, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) fchdir(0xffffffffffffffff) unshare(0x40000000) 23:24:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) 23:24:18 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket(0x22, 0x803, 0x0) perf_event_open(&(0x7f0000000c00)={0x5, 0x70, 0x2, 0xff, 0x1, 0x4, 0x0, 0x4, 0x3101c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280)}, 0x2, 0xfffffffffffffffd, 0x7, 0x2, 0x0, 0x0, 0x40}, 0x0, 0xb, 0xffffffffffffffff, 0x68146ac82f78b3e1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480)='NLBL_CIPSOv4\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRESDEC=r2, @ANYRESDEC=r2], 0x3c}}, 0x20000010) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x1) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="a570914fe67462c96f7bfd4197b433304a540c933b6b629d5a26ceed72554cd139d724aeddf589c850a685247371a78ae72f0654b57454af969c3dc4e2a3f0b4b0ea5a2752d1053a56ea0bfa2b18ffd5f60f039e5c4b552fb3b24768a39bb735b875bca3cf4d6f39b9199020c452b8e93d0bfc79b6121b474abac6d0"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)="81fa18df33afc80c840cb504e5193c9eaf7a6a55e1000083d4ba4c24c4cd30092137de9a6e554e74b460d392e372aae4b85960582f4196e105d9b808330b90ff50521c655c827f001b1c395694a3564b0f8ba0eb571212f1d2a7a0a47cd3898154e0e9bfb68affc3bae647c776be09ae5ce5ed7c36b7e662cc7562b0188d96c8afbe118c48b726768a325d7e2ced37a12a8d1952f62ca99056f44b7733f8917fa95d3958a40f0e9b3c371498c77b1e8a761437b65e75c6fb31c81b6f08dd9ddca63979fa6575f7f827d8fab4216f37b1f19ef0df19f22088b1c1dedd1cd1b7558eda89fedcd2524c4100000b8e18946dc7b5a3490b0102c37f65ed13cd6b6236330472832252e20991eebdfdf5358d90ea69f79076f93abafac686a513bcaab30bb0d9a743629c2068947774124a85ce22d6bb141eb291ccf6da6628d112db24151161adcb404a8d912094c777e4a79882f82aefe8e8890f0c1d4a51845c7374566982c164be9a20dc8f9796b05812234e0116366749af98a44bc1d9d194b46de72c4404f9898b4b9671a61ff029850eab2478ced72313df3593555f6f8d811b", 0x1a0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x10, &(0x7f00000005c0)={&(0x7f0000000380)=""/212, 0xd4}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x18}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote={0xac, 0x2}}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 23:24:18 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev={[], 0x34}, 'xfrm0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040051}, 0x4084) [ 231.929503][ T8613] IPv6: sit1: Disabled Multicast RS 23:24:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 23:24:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) r8 = fsmount(r7, 0x1, 0x81) move_mount(r6, &(0x7f0000000340)='./file0\x00', r8, &(0x7f0000000380)='./file0\x00', 0x41) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d118d5cd255675a47ba9eaf6692f00", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) accept$inet6(r1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2434dc7b460000001100270d00"/24, @ANYRES32=r5, @ANYBLOB='\x00'/12], 0x24}}, 0x0) 23:24:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 23:24:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 232.529669][ T8622] IPVS: ftp: loaded support on port[0] = 21 23:24:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0xf0}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:24:19 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)) 23:24:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket(0x22, 0x803, 0x0) perf_event_open(&(0x7f0000000c00)={0x5, 0x70, 0x2, 0xff, 0x1, 0x4, 0x0, 0x4, 0x3101c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280)}, 0x2, 0xfffffffffffffffd, 0x7, 0x2, 0x0, 0x0, 0x40}, 0x0, 0xb, 0xffffffffffffffff, 0x68146ac82f78b3e1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480)='NLBL_CIPSOv4\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRESDEC=r2, @ANYRESDEC=r2], 0x3c}}, 0x20000010) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x1) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="a570914fe67462c96f7bfd4197b433304a540c933b6b629d5a26ceed72554cd139d724aeddf589c850a685247371a78ae72f0654b57454af969c3dc4e2a3f0b4b0ea5a2752d1053a56ea0bfa2b18ffd5f60f039e5c4b552fb3b24768a39bb735b875bca3cf4d6f39b9199020c452b8e93d0bfc79b6121b474abac6d0"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)="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", 0x1a0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x10, &(0x7f00000005c0)={&(0x7f0000000380)=""/212, 0xd4}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x18}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote={0xac, 0x2}}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 23:24:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) 23:24:19 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8224, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10004, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, r0, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xa, 0x10, r4, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r7 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0xfffe, 0x1, 'lblcr\x00', 0x0, 0x0, 0xfffffffe}, 0x2c) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={r8, @loopback, @remote}, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={r10, @remote, @loopback}, 0xc) ioctl$FICLONE(r4, 0x40049409, r6) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r11, 0x104, 0x7, &(0x7f00000001c0)=0x200, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', r10}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) [ 232.906989][ T21] tipc: TX() has been purged, node left! [ 233.012741][ T8679] IPv6: sit1: Disabled Multicast RS 23:24:19 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) chown(0x0, r1, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)={[{@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}], [{@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r1}}, {@smackfshat={'smackfshat', 0x3d, '%9]'}}, {@dont_measure='dont_measure'}, {@hash='hash'}]}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, 0x0, r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, 0x0, r5) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [{0x2, 0x2, r1}], {0x4, 0x6}, [{0x8, 0x1, r3}, {0x8, 0xd, r5}], {}, {0x20, 0x6}}, 0x3c, 0x3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x5, 0x0, [{0x2000, 0x2c, &(0x7f0000000080)=""/44}, {0x0, 0x0, 0x0}, {0x100000, 0x1000, &(0x7f0000000340)=""/4096}, {0x0, 0xdb, &(0x7f0000001c80)=""/219}, {0x0, 0x32, &(0x7f0000001340)=""/50}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b80)) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x5467, 0x5, 0x40, 0x1}, 'syz1\x00', 0x1e}) 23:24:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)) 23:24:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)) 23:24:19 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8224, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10004, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, r0, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xa, 0x10, r4, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r7 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0xfffe, 0x1, 'lblcr\x00', 0x0, 0x0, 0xfffffffe}, 0x2c) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={r8, @loopback, @remote}, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={r10, @remote, @loopback}, 0xc) ioctl$FICLONE(r4, 0x40049409, r6) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r11, 0x104, 0x7, &(0x7f00000001c0)=0x200, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', r10}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 23:24:19 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:19 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8224, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10004, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, r0, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xa, 0x10, r4, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r7 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0xfffe, 0x1, 'lblcr\x00', 0x0, 0x0, 0xfffffffe}, 0x2c) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={r8, @loopback, @remote}, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={r10, @remote, @loopback}, 0xc) ioctl$FICLONE(r4, 0x40049409, r6) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r11, 0x104, 0x7, &(0x7f00000001c0)=0x200, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', r10}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 23:24:19 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8224, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10004, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, r0, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xa, 0x10, r4, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r7 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0xfffe, 0x1, 'lblcr\x00', 0x0, 0x0, 0xfffffffe}, 0x2c) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={r8, @loopback, @remote}, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={r10, @remote, @loopback}, 0xc) ioctl$FICLONE(r4, 0x40049409, r6) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r11, 0x104, 0x7, &(0x7f00000001c0)=0x200, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', r10}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 23:24:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:20 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x4d}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x8000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x2, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @loopback}}]}, 0x34}}, 0x0) 23:24:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="a2b8000900ab0800666174000404010a0200040000f001", 0x17}], 0x0, &(0x7f0000000080)={[{@fat=@discard='discard'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000002c0)=0x8, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="09e1b5c75e010000", @ANYRES16=r4, @ANYBLOB="3f02000000000000000041000000000000000c41f000001d001462726f616463617374d06c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0x16, 0x2, @l2={'eth', 0x3a, 'nr0\x00'}}}}, ["", "", "", "", ""]}, 0x30}}, 0x80) 23:24:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, &(0x7f0000000040)=""/107, 0x6b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 23:24:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) [ 233.965818][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.986830][ T8722] FAULT_INJECTION: forcing a failure. [ 233.986830][ T8722] name failslab, interval 1, probability 0, space 0, times 1 23:24:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 234.079435][ T8725] FAT-fs (loop1): mounting with "discard" option, but the device does not support discard [ 234.089731][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.102724][ T8722] CPU: 1 PID: 8722 Comm: syz-executor.3 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 234.112202][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.122267][ T8722] Call Trace: [ 234.125580][ T8722] dump_stack+0x18f/0x20d 23:24:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 234.129925][ T8722] should_fail.cold+0x5/0x14 [ 234.134534][ T8722] ? tomoyo_realpath_from_path+0xc3/0x620 [ 234.140267][ T8722] should_failslab+0x5/0xf [ 234.144719][ T8722] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 234.150802][ T8722] __kmalloc+0x6f/0x320 [ 234.155002][ T8722] tomoyo_realpath_from_path+0xc3/0x620 [ 234.160566][ T8722] ? tomoyo_profile+0x42/0x50 [ 234.165263][ T8722] tomoyo_path_number_perm+0x1cb/0x4d0 [ 234.170732][ T8722] ? tomoyo_path_number_perm+0x183/0x4d0 23:24:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 234.176381][ T8722] ? tomoyo_execute_permission+0x470/0x470 [ 234.182206][ T8722] ? delayed_put_pid+0x30/0x30 [ 234.186987][ T8722] ? find_held_lock+0x2d/0x110 [ 234.191767][ T8722] ? ksys_write+0x212/0x250 [ 234.196297][ T8722] ? __mutex_unlock_slowpath+0xe2/0x610 [ 234.201867][ T8722] ? __fget_files+0x294/0x400 [ 234.206561][ T8722] security_file_ioctl+0x50/0xb0 [ 234.211517][ T8722] __x64_sys_ioctl+0xb3/0x200 [ 234.216218][ T8722] do_syscall_64+0x2d/0x70 [ 234.220651][ T8722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 234.226551][ T8722] RIP: 0033:0x45d189 23:24:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 234.230485][ T8722] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.250106][ T8722] RSP: 002b:00007f55e2996c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.258535][ T8722] RAX: ffffffffffffffda RBX: 000000000001c340 RCX: 000000000045d189 [ 234.266545][ T8722] RDX: 0000000020000000 RSI: 000000000000560a RDI: 0000000000000003 23:24:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) [ 234.274535][ T8722] RBP: 00007f55e2996ca0 R08: 0000000000000000 R09: 0000000000000000 [ 234.282514][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.290493][ T8722] R13: 00007ffffcdca26f R14: 00007f55e29979c0 R15: 000000000118cf4c 23:24:20 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6336}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:24:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 23:24:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, &(0x7f0000000040)=""/107, 0x6b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 23:24:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) r3 = syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r3, 0xfff, 0x80000}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="43bea6003da1a786d54f4f533644fb354991a24f0a8addd8b46a90e5f1342cedbf1f27ab51eea18d7bdc6fca6d0e7b59e4dc97a97f35b7cfe1a805adb91500b190e1c4ff117e0e864076940115a2b8ab54c87f9540ff6df21b920d353419f86de967d3c3bd4a3dee1db654948e0700535497495fec432918a2874c959b8380ecb6b44cdc59444240d0574020923a12438de1db01c0a45217f15de3948454d4ee7110df816551dd9f3c8cb5660d2e5894dfcc957acb88a08efeaa8ca5b5bc46ccdfbecd27c55bd826f385cb512fe9ebbcd9100d102e5061c6", @ANYRESHEX, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) [ 234.570517][ T8722] ERROR: Out of memory at tomoyo_realpath_from_path. 23:24:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)) [ 234.749569][ T8772] FAULT_INJECTION: forcing a failure. [ 234.749569][ T8772] name failslab, interval 1, probability 0, space 0, times 0 [ 234.856626][ T8772] CPU: 1 PID: 8772 Comm: syz-executor.3 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 234.866125][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.876188][ T8772] Call Trace: [ 234.879497][ T8772] dump_stack+0x18f/0x20d [ 234.883851][ T8772] should_fail.cold+0x5/0x14 [ 234.888460][ T8772] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 234.893843][ T8772] should_failslab+0x5/0xf [ 234.898270][ T8772] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 234.904347][ T8772] __kmalloc+0x6f/0x320 [ 234.908508][ T8772] ? __d_path+0x160/0x160 [ 234.912847][ T8772] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 234.918406][ T8772] tomoyo_encode2.part.0+0xe9/0x3a0 [ 234.924284][ T8772] tomoyo_encode+0x28/0x50 [ 234.924315][ T8772] tomoyo_realpath_from_path+0x186/0x620 [ 234.924343][ T8772] tomoyo_path_number_perm+0x1cb/0x4d0 [ 234.924359][ T8772] ? tomoyo_path_number_perm+0x183/0x4d0 [ 234.924379][ T8772] ? tomoyo_execute_permission+0x470/0x470 [ 234.924394][ T8772] ? delayed_put_pid+0x30/0x30 [ 234.924413][ T8772] ? find_held_lock+0x2d/0x110 [ 234.924439][ T8772] ? ksys_write+0x212/0x250 [ 234.924478][ T8772] ? __mutex_unlock_slowpath+0xe2/0x610 [ 234.924508][ T8772] ? __fget_files+0x294/0x400 [ 234.924534][ T8772] security_file_ioctl+0x50/0xb0 [ 234.924565][ T8772] __x64_sys_ioctl+0xb3/0x200 [ 234.985292][ T8772] do_syscall_64+0x2d/0x70 [ 234.985312][ T8772] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 234.985325][ T8772] RIP: 0033:0x45d189 23:24:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) [ 234.985342][ T8772] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.985351][ T8772] RSP: 002b:00007f55e2996c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.985367][ T8772] RAX: ffffffffffffffda RBX: 000000000001c340 RCX: 000000000045d189 [ 234.985386][ T8772] RDX: 0000000020000000 RSI: 000000000000560a RDI: 0000000000000003 [ 235.043534][ T8772] RBP: 00007f55e2996ca0 R08: 0000000000000000 R09: 0000000000000000 23:24:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, &(0x7f0000000040)=""/107, 0x6b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 235.043545][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 23:24:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, &(0x7f0000000040)=""/107, 0x6b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 23:24:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) [ 235.043556][ T8772] R13: 00007ffffcdca26f R14: 00007f55e29979c0 R15: 000000000118cf4c 23:24:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)) 23:24:21 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) r3 = syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r3, 0xfff, 0x80000}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="43bea6003da1a786d54f4f533644fb354991a24f0a8addd8b46a90e5f1342cedbf1f27ab51eea18d7bdc6fca6d0e7b59e4dc97a97f35b7cfe1a805adb91500b190e1c4ff117e0e864076940115a2b8ab54c87f9540ff6df21b920d353419f86de967d3c3bd4a3dee1db654948e0700535497495fec432918a2874c959b8380ecb6b44cdc59444240d0574020923a12438de1db01c0a45217f15de3948454d4ee7110df816551dd9f3c8cb5660d2e5894dfcc957acb88a08efeaa8ca5b5bc46ccdfbecd27c55bd826f385cb512fe9ebbcd9100d102e5061c6", @ANYRESHEX, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) 23:24:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) r3 = syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r3, 0xfff, 0x80000}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="43bea6003da1a786d54f4f533644fb354991a24f0a8addd8b46a90e5f1342cedbf1f27ab51eea18d7bdc6fca6d0e7b59e4dc97a97f35b7cfe1a805adb91500b190e1c4ff117e0e864076940115a2b8ab54c87f9540ff6df21b920d353419f86de967d3c3bd4a3dee1db654948e0700535497495fec432918a2874c959b8380ecb6b44cdc59444240d0574020923a12438de1db01c0a45217f15de3948454d4ee7110df816551dd9f3c8cb5660d2e5894dfcc957acb88a08efeaa8ca5b5bc46ccdfbecd27c55bd826f385cb512fe9ebbcd9100d102e5061c6", @ANYRESHEX, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) [ 235.433792][ T8772] ERROR: Out of memory at tomoyo_realpath_from_path. 23:24:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)) [ 235.624280][ T8821] FAULT_INJECTION: forcing a failure. [ 235.624280][ T8821] name failslab, interval 1, probability 0, space 0, times 0 [ 235.697479][ T8821] CPU: 0 PID: 8821 Comm: syz-executor.3 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 235.706976][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.717040][ T8821] Call Trace: [ 235.720346][ T8821] dump_stack+0x18f/0x20d [ 235.724696][ T8821] should_fail.cold+0x5/0x14 [ 235.729305][ T8821] should_failslab+0x5/0xf [ 235.733736][ T8821] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 235.739815][ T8821] kmem_cache_alloc_trace+0x49/0x2c0 [ 235.745132][ T8821] tomoyo_init_log+0x18a/0x1e50 [ 235.750001][ T8821] ? common_lsm_audit+0x1cb0/0x1cb0 [ 235.755204][ T8821] ? find_held_lock+0x2d/0x110 [ 235.759978][ T8821] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 235.765899][ T8821] ? tomoyo_profile+0x42/0x50 [ 235.770589][ T8821] ? tomoyo_domain_quota_is_ok+0x2d2/0x550 [ 235.776413][ T8821] tomoyo_supervisor+0x32f/0xeb0 [ 235.781367][ T8821] ? tomoyo_profile+0x50/0x50 [ 235.786050][ T8821] ? pointer+0x970/0x970 [ 235.790303][ T8821] ? lockdep_hardirqs_off+0x89/0xc0 [ 235.795537][ T8821] ? tomoyo_check_path_number_acl+0x86/0x300 [ 235.801542][ T8821] tomoyo_path_number_perm+0x3ed/0x4d0 [ 235.807011][ T8821] ? tomoyo_execute_permission+0x470/0x470 [ 235.812831][ T8821] ? delayed_put_pid+0x30/0x30 [ 235.817613][ T8821] ? ksys_write+0x212/0x250 [ 235.822156][ T8821] ? __mutex_unlock_slowpath+0xe2/0x610 [ 235.827729][ T8821] ? __fget_files+0x294/0x400 [ 235.832421][ T8821] security_file_ioctl+0x50/0xb0 [ 235.837373][ T8821] __x64_sys_ioctl+0xb3/0x200 [ 235.842065][ T8821] do_syscall_64+0x2d/0x70 [ 235.846488][ T8821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 235.852386][ T8821] RIP: 0033:0x45d189 [ 235.856287][ T8821] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.875900][ T8821] RSP: 002b:00007f55e2996c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.884415][ T8821] RAX: ffffffffffffffda RBX: 000000000001c340 RCX: 000000000045d189 23:24:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:22 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f100000080003"], 0x4}}, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000001980)={0x8, 0x366, 0x80000000, 0x3, 0x5, 0x1000, 0x3ff}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830af41b0000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r1, 0x0, 0x100000002) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x80000001, 0x4, 0xffff, 0x8, 0x7, 0x8000, 0x750}) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0xa, &(0x7f0000001840)=[{&(0x7f0000000140)="1fecaa52047bcb5323429d5ae863f6db25f8f37af4770e5fcbcfcbf3fb20068b3877a54bc0a5dd62ed", 0x29, 0x8001}, {&(0x7f0000000400)="9db92b45438b9936c8e77c3ccff844b84a067f6805ce775cd3333971bba58037431930f6d3047555dba24dd390c259d8de4a219e6ab388cccd894d48ffed0129f4aa7a06eb5c79f6766f1b10929ba47b1174624fa0671543a859bd84e9d45233057a1775b8634c21d750d076750f1efc0e1faaa08ccbe1041cc3794a27fd5b48b5d68a480b972ed9584df6484fc3c8dee2c18d08e23fe0eaebd350892fb81a58a74e433ab41c77fee4862d98da9600d62973f115e26b8b38ddac095de9f1450ea68621d9ae8ce1ec6d2dd9fca6b351b2b3b7168ab5811a25131eddab", 0xdc, 0x2}, {&(0x7f0000000200)="9ae17a8013775c75f82a824e8aaa99023a22b7358cfe00a8d315dfdc74958bf7c1c275c968cd4f4fe5cad7ee5ea4d49956db9c4da648184619f99295a497e6ac6fad8f5f99260646cd2dad4b269fb890a2ff13602724a3de42e3dc586bb8173b7c178c7356107840ae6a0b568f0fa33be676a7f1bdaea0f0555b9a2d93899015979063ab1bef88e991ab3cb1dd9ee7da4c18ca700e90e3b57348ab", 0x9b, 0xffffffff}, {&(0x7f0000000500)="bfa1f005b851db311f3f01f22cf7c098dc88b479f1b9c813defcaff3b8d4e9629be1f6f3524a286b9f9b58108a6718aeb64d782407cb5716789971fdd2a4e8b8919b98ff572ee6125d971bff374dac8f266f3d5b4c2f5853661832e4666fd2aa5fbeed667488c0c3db850f549ebf3008fe9bd6dddc4e004f35bc620d2885d706ef5ecbdb38a546b62148ec4bc49e6baa29927d7be33d1237f6a3af7975a9e75241f587457043197e40f69c", 0xab, 0x100000000}, {&(0x7f0000000300)="3ca953a63fa194309e02cbe22b1b1fc3e4cd1b53feb678bc18df05055e7c68965db5fae7f3493ae97f7210ddb9a42addc04ea053779908f81a6608c07f4e28faa5362b74f4f6ceddad508d1f4bb1ddb64535a283ea9fa023ed0b515b7849ee3905a5520425caba07de89", 0x6a, 0x1}, {&(0x7f00000005c0)="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", 0x1000, 0xc68}, {&(0x7f00000015c0)="9be46df492720408e3655020816987094c3ccb79782d9fc396ffd674191d80818636991272978acfa972f3e815f2ec2b3071d2ad677876894af3f3e42b8ebe27eba67281639928d1494d58f43b03aef8e48aaae503dd33659fd93ee773f75134765db39b9e47abcdcdfe5ce456af803631c27c87b4ad399a89ba01d712616c42a48df6f7dc0a4773ea275ed8b8634d563d6a952ae6f2ea6e810b1be573283d2e07e0b184d5de5acaa3e51607e7f278a0570af8cd33b3a8dfbf84bae080481237bf4995ae94c3513b8bef73140d12f58ac0669c696fe0bee983d5", 0xda}, {&(0x7f00000016c0)="62386ce99dfa2644323560333d77ab33111dc622ce5f450884e33f3dd9558bc44988fecb25ff3ed92cef525340e6117cb9671ccf79b7efefbafd545e1c7cea58c24fde2ad9e7cb66c7ac0fe1f6edd9a94abbc785189a89320ab730393def9018e94366cf99f57931dd505c61fd0d5bad338b732fbde4a89d47fe2ad4897a594732b559be1796de3e90d9e5bc261a87256d8ba207b8a58e5f63590070b1d76ec8cb14b6df5dbd029f5885ead6598da4cad196872cf2e8f9111251abd4fc969e8a1d98f078f9cdb952bcf55a4d96adbcce1a911d14422aea30b55a37e8d2899e22d3", 0xe1, 0x7fffffff}, {&(0x7f00000017c0)="152b71e68e6a7fdf254342d353a8f632f20cc5d5ee02e4a9ee", 0x19, 0x7}, {&(0x7f0000001800)="bed66ac7e1c5f6f756362c16ed923bf25903c9", 0x13, 0xfffffffffffffffe}], 0x2004000, &(0x7f0000001940)='/)}:#+-\'@/$\x00') [ 235.892396][ T8821] RDX: 0000000020000000 RSI: 000000000000560a RDI: 0000000000000003 [ 235.900377][ T8821] RBP: 00007f55e2996ca0 R08: 0000000000000000 R09: 0000000000000000 [ 235.908356][ T8821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.916332][ T8821] R13: 00007ffffcdca26f R14: 00007f55e29979c0 R15: 000000000118cf4c 23:24:22 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) [ 236.075281][ T8834] FAULT_INJECTION: forcing a failure. [ 236.075281][ T8834] name failslab, interval 1, probability 0, space 0, times 0 [ 236.107222][ T27] audit: type=1804 audit(1597274662.302:2): pid=8832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir422257020/syzkaller.tTUH8e/15/cgroup.controllers" dev="sda1" ino=15846 res=1 errno=0 [ 236.161021][ T8834] CPU: 0 PID: 8834 Comm: syz-executor.0 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 236.170521][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.180590][ T8834] Call Trace: [ 236.183901][ T8834] dump_stack+0x18f/0x20d [ 236.188273][ T8834] should_fail.cold+0x5/0x14 [ 236.192879][ T8834] ? tomoyo_realpath_from_path+0xc3/0x620 [ 236.198610][ T8834] should_failslab+0x5/0xf [ 236.203039][ T8834] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 236.209120][ T8834] __kmalloc+0x6f/0x320 [ 236.213302][ T8834] tomoyo_realpath_from_path+0xc3/0x620 [ 236.218866][ T8834] ? tomoyo_profile+0x42/0x50 [ 236.223556][ T8834] tomoyo_path_number_perm+0x1cb/0x4d0 [ 236.229026][ T8834] ? tomoyo_path_number_perm+0x183/0x4d0 [ 236.234675][ T8834] ? tomoyo_execute_permission+0x470/0x470 [ 236.240491][ T8834] ? delayed_put_pid+0x30/0x30 [ 236.245261][ T8834] ? find_held_lock+0x2d/0x110 [ 236.250042][ T8834] ? ksys_write+0x212/0x250 [ 236.254577][ T8834] ? __mutex_unlock_slowpath+0xe2/0x610 [ 236.260142][ T8834] ? __fget_files+0x294/0x400 [ 236.264845][ T8834] security_file_ioctl+0x50/0xb0 [ 236.269795][ T8834] __x64_sys_ioctl+0xb3/0x200 [ 236.274487][ T8834] do_syscall_64+0x2d/0x70 [ 236.278924][ T8834] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 236.284824][ T8834] RIP: 0033:0x45d189 [ 236.288727][ T8834] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.308341][ T8834] RSP: 002b:00007fc1ffb67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.316777][ T8834] RAX: ffffffffffffffda RBX: 000000000001c340 RCX: 000000000045d189 23:24:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}, {&(0x7f0000000180)="872a1a1c811d3be7faaed50f1ca7f5362af7cab4bbd86c546840f1b432499e31fc62490a65e9a65aaa8a5579a95009e753ed1650a53a00163914bf4f7f1bf1113d9dfc57158d4224221091238799f866074f582f62a62c4cda0974c46d7a020c8793938add59744a3585a474410818bfa8de5ff8393f8e96c8a0f6c8ca30006d8e18a6c967d6e8a0cffb94e6b6c7ab114afc6884ff61f64a424f1fb1544d2b6f370efe9e55870ca8cef45eca759a1fdf378b8f1c", 0xb4, 0x4}], 0x0, &(0x7f0000000000)={[{@lazytime='lazytime'}, {@usrjquota='usrjquota='}]}) [ 236.324761][ T8834] RDX: 0000000020000000 RSI: 000000000000560a RDI: 0000000000000003 [ 236.332744][ T8834] RBP: 00007fc1ffb67ca0 R08: 0000000000000000 R09: 0000000000000000 [ 236.340725][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.348706][ T8834] R13: 00007ffd195cffbf R14: 00007fc1ffb689c0 R15: 000000000118cf4c [ 236.399409][ T8836] nfs: Unknown parameter '/)}:#+-'@/$' 23:24:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) [ 236.534885][ T8844] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 236.635929][ T8844] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 23:24:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000080010902c7b7b01701"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000240)=0x4) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000000c0)={0x80000001, 0x7}) 23:24:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x3, 0x2, 0xff}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x8]}, {0x7, 0x0, [0x10, 0x2, 0x18]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x8001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req={0x1, 0x0, 0x80000000, 0x6}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000100), 0x4) 23:24:23 executing program 2: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3050, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000400)="5cdd08df9a797b2f56e707f6933db0799581784a3d53f92154c4324769078daf82f47b2934ac5e6c9391a469529ecb241981b62f64c00ff7e88d99b0e76808ba609f5b539a54368338c0aca15b2856702b3567f85e6e205ea425880d597b725c7798b38b1c6077bc2f8ab5be7a06ceeb56591b1258980f90e02fdbc406626686e61499cfc1777bcc3590f6bad2a942da4b7c6ac9f93097c72a4d84c7c8e93ae87664254e55ad00f9ce3ba46a2b39a06a", 0xb0}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x100007, r3, 0x9, 0x0, 0x0, 0xd}) gettid() syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000140)) [ 237.192452][ T27] audit: type=1804 audit(1597274663.392:3): pid=8867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir422257020/syzkaller.tTUH8e/16/bus" dev="sda1" ino=15857 res=1 errno=0 23:24:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 237.351129][ T27] audit: type=1804 audit(1597274663.452:4): pid=8860 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir422257020/syzkaller.tTUH8e/16/bus" dev="sda1" ino=15857 res=1 errno=0 [ 237.360149][ T8834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.410223][ T7787] usb 2-1: new high-speed USB device number 2 using dummy_hcd 23:24:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) [ 237.487572][ T27] audit: type=1804 audit(1597274663.452:5): pid=8860 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir422257020/syzkaller.tTUH8e/16/bus" dev="sda1" ino=15857 res=1 errno=0 23:24:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 237.618249][ T27] audit: type=1804 audit(1597274663.472:6): pid=8867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir422257020/syzkaller.tTUH8e/16/bus" dev="sda1" ino=15857 res=1 errno=0 23:24:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:23 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup2(r0, r3) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$cgroup_ro(r4, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c, 0x0, 0x5}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r6 = dup(0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x24043, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) faccessat2(0xffffffffffffff9c, &(0x7f00000000c0)='./control\x00', 0x0, 0x300) 23:24:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x2405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 237.820218][ T7787] usb 2-1: config index 0 descriptor too short (expected 47047, got 18) [ 237.845684][ T7787] usb 2-1: config 23 has too many interfaces: 176, using maximum allowed: 32 [ 237.898603][ T7787] usb 2-1: config 23 has an invalid descriptor of length 0, skipping remainder of the config [ 237.898625][ T7787] usb 2-1: config 23 has 0 interfaces, different from the descriptor's value: 176 [ 237.990161][ T7787] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 238.015290][ T7787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 238.080079][ T7787] usb 2-1: SerialNumber: syz [ 238.912748][ T7787] usb 2-1: USB disconnect, device number 2 [ 239.709704][ T7787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 240.109937][ T7787] usb 2-1: config index 0 descriptor too short (expected 47047, got 18) [ 240.118347][ T7787] usb 2-1: config 23 has too many interfaces: 176, using maximum allowed: 32 [ 240.127234][ T7787] usb 2-1: config 23 has an invalid descriptor of length 0, skipping remainder of the config [ 240.137532][ T7787] usb 2-1: config 23 has 0 interfaces, different from the descriptor's value: 176 23:24:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) r1 = gettid() tkill(r1, 0x33) ptrace$setopts(0x4206, r1, 0xffff, 0x1000e4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0xda}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:24:26 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0xc800) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xa000fffffffe) [ 240.219841][ T7787] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 240.228912][ T7787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 23:24:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401012fc, 0x0) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f00000002c0)="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") r10 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) [ 240.274680][ T7787] usb 2-1: SerialNumber: syz [ 240.329669][ T7787] usb 2-1: can't set config #23, error -71 [ 240.344712][ T27] audit: type=1804 audit(1597274666.543:7): pid=8924 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir883832098/syzkaller.CDxjeF/16/bus" dev="sda1" ino=15877 res=1 errno=0 [ 240.350021][ T7787] usb 2-1: USB disconnect, device number 3 23:24:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup2(r0, r3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x5, 0x1}) socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) open_by_handle_at(r4, &(0x7f0000000200)={0x91, 0x8, "5510121c0cddd54f7c20765ce6816fd589477975bbd1af6844faa210164a902df392d9a845e425acd4532f27e9256a4e6d79b0951126e4d196eb1f3d63e1f2dda81cf53994a9fe55bf853141e63bf7585862269d9b4241de996bd211d4ee48b1a4eb6d59231426906eca84946956562c97f8600488e4daf2b03033d0611e02c625c7cc37438d716c40"}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) sendmmsg$inet6(r6, &(0x7f0000000d80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x37, {@mcast2}}}], 0x28}}], 0x2, 0x0) [ 240.422697][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:26 executing program 4: r0 = gettid() openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x80200, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="016b"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4808}, 0x4000000) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 240.463490][ T27] audit: type=1804 audit(1597274666.603:8): pid=8924 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir883832098/syzkaller.CDxjeF/16/bus" dev="sda1" ino=15877 res=1 errno=0 [ 240.481028][ T8932] bridge1: port 1(syz_tun) entered blocking state 23:24:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b31, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 240.528834][ T8932] bridge1: port 1(syz_tun) entered disabled state [ 240.558025][ T8932] device syz_tun entered promiscuous mode 23:24:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:27 executing program 1: socket$pppoe(0x18, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000070000000000000000000000000000005f15bd4ab4d23c46c7e49984081b3f8ececb8a", @ANYRES32, @ANYBLOB="130000000000000001c000"], 0x3c}}, 0x0) 23:24:27 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x839) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 23:24:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b32, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b33, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:27 executing program 1: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mlock(&(0x7f0000900000/0x9000)=nil, 0x9000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 23:24:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b31, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141414e0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x4, 0x6f, &(0x7f0000000100)="53c7c2567a88fb838dd072c3880d12efa33cefe4ed6e0d0ee46a108b921f9ec1f70922f6788bf0ef599a9900d093b1d5b43c080f6bbdfac1b38610e93f2c20adf29c4f6e66e319c545650b85e4b7257f7cc335592d8b4e71123f8399df806b7c70a70db52955ba25f793ab05f59cab"}) 23:24:29 executing program 1: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mlock(&(0x7f0000900000/0x9000)=nil, 0x9000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 23:24:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b35, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b32, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33eb0c41a95cbabdcdddd183da6b9d0b9c6aa00"/56], 0x14}}, 0x0) 23:24:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x2f, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x1b, 0x7e, &(0x7f0000000040)="24cbb11c30884d1c954efd01fedb825be741e09f2cbec8b7e3d09a", &(0x7f0000000100)=""/126, 0x6a, 0x0, 0x54, 0x3f, &(0x7f0000000200)="e1b4273cd564ef2070d6c4dfa56bed5426e7d1ff882093ee613554f3e20705f58dd298386e3b9c6381171922df486dbb1cc717d510f7916bb8362bc2b15a88fd094a0a0a72a9722b6b7972ddeaaac4831f1a1a84", &(0x7f0000000080)="68e2e9273708863927aafbb607927fc5665b832f04c3dc096ce678f87e31097a84ca4e3b29bc2b8978953ff064d337cabd77e40b1856dca455f6a23309121a"}, 0x40) 23:24:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b36, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b33, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x168, 0x1170, 0x1170, 0x168, 0x1170, 0x370, 0x1398, 0x1398, 0x370, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x0, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x1]}}, @common=@mh={{0x28, 'mh\x00'}, {"23e2", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x8, 0x10001, 'syz1\x00', {0x2}}}}, {{@ipv6={@ipv4={[], [], @multicast2}, @empty, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0x0, 0xff], 'nr0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x21, 0x6f, 0x0, 0x4}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @local]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x5}, {0x4, 0x3, 0x2}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001}) 23:24:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x1}, &(0x7f00000001c0)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000)={0x2094, 0x9, 0x6, 0x3, 0x6}, 0x14) r8 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}]}}}]}, 0x44}}, 0x0) [ 243.835987][ T9029] x_tables: ip6_tables: mh match: only valid for protocol 135 23:24:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b37, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 243.885563][ T9029] x_tables: ip6_tables: mh match: only valid for protocol 135 23:24:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b3a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x33) fcntl$setown(0xffffffffffffffff, 0x8, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000040)=""/105, &(0x7f00000000c0)=0x69) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0x2, 0x0) 23:24:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x9, "3462964f2190ed85c51169f21c87aa402d9f666233acab685c0572c2565209e1", 0x5, 0x4, 0x5, 0xb0, 0x4, 0x2, 0x5, 0x8001}) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b35, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, 0x0, 0x0) 23:24:30 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60000011}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) dup2(r6, r9) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000050000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010400000c008f001fffffff000000000c0090000000000000000000"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r11, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4040850) 23:24:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x36c, 0x8, [], &(0x7f00000000c0)=0x9}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x0, 0x3, {0x7f, 0x8000, 0x20000000, 0x46, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa1}}, 0x0) 23:24:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b3b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b36, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x9, "3462964f2190ed85c51169f21c87aa402d9f666233acab685c0572c2565209e1", 0x5, 0x4, 0x5, 0xb0, 0x4, 0x2, 0x5, 0x8001}) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b3c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 244.550681][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b37, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 244.617337][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.687802][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b3d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x9, "3462964f2190ed85c51169f21c87aa402d9f666233acab685c0572c2565209e1", 0x5, 0x4, 0x5, 0xb0, 0x4, 0x2, 0x5, 0x8001}) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.current\x00', 0x26e1, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="480100001000130700000000000000007f000001000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000003300000000000000000000000000000000000001000000005077210e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000000000"], 0x148}}, 0x0) [ 244.742465][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, 0x0, 0x0) 23:24:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) write$capi20(r3, &(0x7f0000000040)={0x10, 0x0, 0x4, 0x80, 0x7, 0x4}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000000)='.\x00'}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:24:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.current\x00', 0x26e1, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="480100001000130700000000000000007f000001000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000003300000000000000000000000000000000000001000000005077210e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000000000"], 0x148}}, 0x0) 23:24:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x9, "3462964f2190ed85c51169f21c87aa402d9f666233acab685c0572c2565209e1", 0x5, 0x4, 0x5, 0xb0, 0x4, 0x2, 0x5, 0x8001}) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup2(r0, r3) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P2=\x00\x00\x00', @ANYRES16, @ANYRESOCT=r3], 0x50}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7aa8, 0x401}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x78}}, 0x0) 23:24:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b41, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 245.529381][ T9130] debugfs: Directory '9130-4' with parent 'kvm' already present! 23:24:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b08006783"], 0xe9) 23:24:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, 0x0, 0x0) 23:24:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b45, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000016, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xc0fe}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)={0x3c, 0x4, [], [@generic={0x7f, 0x1, '$'}, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x49}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}]}, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', r4}) 23:24:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 246.503413][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b41, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b48, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 247.177190][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:24:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000016, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xc0fe}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)={0x3c, 0x4, [], [@generic={0x7f, 0x1, '$'}, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x49}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}]}, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', r4}) 23:24:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b45, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 247.495143][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:24:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b4c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b48, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b4e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:24:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b60, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b61, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 23:24:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b62, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b63, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b60, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b64, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 23:24:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b61, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b65, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x555, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41002, 0x0, 0xffffffff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0xc03, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) 23:24:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:37 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b62, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x555, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41002, 0x0, 0xffffffff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0xc03, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) 23:24:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 23:24:38 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b63, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b69, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b64, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:38 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b6a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 23:24:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b65, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:39 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:39 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b6d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 23:24:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:40 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b70, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b69, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 23:24:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4bfa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:41 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4bfb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:24:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4c01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:24:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:24:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:24:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b70, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x540b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:24:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:24:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:24:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x540c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:24:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:24:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x540d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x540e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e484c199b400de33e"], 0x14}}, 0x0) 23:24:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x540f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) getsockopt$packet_int(r1, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 23:24:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4c00, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5410, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 23:24:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4c01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) getsockopt$packet_int(r1, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 23:24:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:24:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) getsockopt$packet_int(r1, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 23:24:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 23:24:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5413, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:45 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 23:24:45 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:24:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:45 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:45 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5415, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:45 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:46 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:24:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5416, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:46 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:46 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5418, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:46 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e530"], 0x14}}, 0x0) 23:24:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x541c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x541d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e530"], 0x14}}, 0x0) 23:24:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5410, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5413, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e530"], 0x14}}, 0x0) 23:24:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5422, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5423, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5415, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b9f5e48"], 0x14}}, 0x0) 23:24:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5424, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5416, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5418, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5425, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e530"], 0x14}}, 0x0) 23:24:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5427, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f32ddd7663683a8f885f959006765f30f7f940040c1f9000f01df66b85a000f00d8c4c2c1ac96eac70000b9380a00000f320f06", 0x34}], 0x1, 0x0, 0x0, 0x0) 23:24:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:24:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5428, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 23:24:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e530"], 0x14}}, 0x0) 23:24:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5429, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:24:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:24:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5437, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e530"], 0x14}}, 0x0) 23:24:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5441, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:24:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5451, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed4b"], 0x14}}, 0x0) 23:24:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5422, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5423, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038"], 0x14}}, 0x0) 23:24:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:53 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5424, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:54 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5600, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5425, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038"], 0x14}}, 0x0) 23:24:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5427, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5428, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038"], 0x14}}, 0x0) 23:24:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5429, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5603, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, 0x0) 23:24:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5604, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5437, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:24:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5605, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, 0x0) 23:24:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5441, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, 0x0) 23:24:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5451, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8"], 0x14}}, 0x0) 23:24:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5607, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)) 23:24:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)) 23:24:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8"], 0x14}}, 0x0) 23:24:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)) 23:24:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:24:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5501, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8"], 0x14}}, 0x0) 23:24:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5509, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5600, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:24:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5603, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:24:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5605, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:24:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:24:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) 23:25:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5617, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5607, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5618, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:00 executing program 5: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) 23:25:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5625, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 5: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5632, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 5: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x6364, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) 23:25:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x8912, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x8914, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:02 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x8933, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:02 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x8935, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:02 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:02 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, 0x0) 23:25:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x89e2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5625, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, 0x0) 23:25:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xae01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x6364, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, 0x0) 23:25:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xae41, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x8904, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xae60, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x8933, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xae01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x400448c9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) [ 277.765031][T10671] FAULT_INJECTION: forcing a failure. [ 277.765031][T10671] name failslab, interval 1, probability 0, space 0, times 0 [ 277.790692][T10671] CPU: 1 PID: 10671 Comm: syz-executor.5 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 277.800281][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.810357][T10671] Call Trace: [ 277.813672][T10671] dump_stack+0x18f/0x20d [ 277.818048][T10671] should_fail.cold+0x5/0x14 [ 277.822668][T10671] ? tomoyo_realpath_from_path+0xc3/0x620 [ 277.828414][T10671] should_failslab+0x5/0xf [ 277.832856][T10671] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 277.838951][T10671] __kmalloc+0x6f/0x320 [ 277.843141][T10671] tomoyo_realpath_from_path+0xc3/0x620 [ 277.848716][T10671] ? tomoyo_profile+0x42/0x50 [ 277.853428][T10671] tomoyo_path_number_perm+0x1cb/0x4d0 [ 277.858918][T10671] ? tomoyo_path_number_perm+0x183/0x4d0 [ 277.864585][T10671] ? tomoyo_execute_permission+0x470/0x470 [ 277.870414][T10671] ? delayed_put_pid+0x30/0x30 [ 277.875230][T10671] ? find_held_lock+0x2d/0x110 [ 277.880044][T10671] ? ksys_write+0x212/0x250 [ 277.884593][T10671] ? __mutex_unlock_slowpath+0xe2/0x610 [ 277.890182][T10671] ? __fget_files+0x294/0x400 [ 277.894894][T10671] security_file_ioctl+0x50/0xb0 [ 277.899853][T10671] __x64_sys_ioctl+0xb3/0x200 [ 277.904549][T10671] do_syscall_64+0x2d/0x70 [ 277.908982][T10671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 23:25:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 277.914881][T10671] RIP: 0033:0x45d189 [ 277.918787][T10671] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.938404][T10671] RSP: 002b:00007f70222adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.946838][T10671] RAX: ffffffffffffffda RBX: 000000000001c340 RCX: 000000000045d189 [ 277.954827][T10671] RDX: 0000000020000000 RSI: 0000000000004b4a RDI: 0000000000000003 23:25:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xae41, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 277.962817][T10671] RBP: 00007f70222adca0 R08: 0000000000000000 R09: 0000000000000000 [ 277.970806][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.978817][T10671] R13: 00007ffd94107ecf R14: 00007f70222ae9c0 R15: 000000000118cf4c 23:25:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x400454ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xae60, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 278.126510][T10671] ERROR: Out of memory at tomoyo_realpath_from_path. 23:25:04 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xae80, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) [ 278.339757][T10703] FAULT_INJECTION: forcing a failure. [ 278.339757][T10703] name failslab, interval 1, probability 0, space 0, times 0 [ 278.389569][T10703] CPU: 1 PID: 10703 Comm: syz-executor.5 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 278.399159][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.409231][T10703] Call Trace: [ 278.412542][T10703] dump_stack+0x18f/0x20d [ 278.416908][T10703] should_fail.cold+0x5/0x14 [ 278.421524][T10703] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 278.426911][T10703] should_failslab+0x5/0xf [ 278.431341][T10703] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 278.437423][T10703] __kmalloc+0x6f/0x320 [ 278.441590][T10703] ? __d_path+0x160/0x160 [ 278.445934][T10703] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 278.451493][T10703] tomoyo_encode2.part.0+0xe9/0x3a0 [ 278.456701][T10703] tomoyo_encode+0x28/0x50 [ 278.461129][T10703] tomoyo_realpath_from_path+0x186/0x620 [ 278.466784][T10703] tomoyo_path_number_perm+0x1cb/0x4d0 [ 278.472258][T10703] ? tomoyo_path_number_perm+0x183/0x4d0 [ 278.477924][T10703] ? tomoyo_execute_permission+0x470/0x470 [ 278.483741][T10703] ? delayed_put_pid+0x30/0x30 [ 278.488524][T10703] ? find_held_lock+0x2d/0x110 [ 278.493322][T10703] ? ksys_write+0x212/0x250 [ 278.497862][T10703] ? __mutex_unlock_slowpath+0xe2/0x610 [ 278.503441][T10703] ? __fget_files+0x294/0x400 [ 278.508150][T10703] security_file_ioctl+0x50/0xb0 [ 278.513119][T10703] __x64_sys_ioctl+0xb3/0x200 [ 278.517838][T10703] do_syscall_64+0x2d/0x70 [ 278.522280][T10703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.528184][T10703] RIP: 0033:0x45d189 [ 278.532093][T10703] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.551744][T10703] RSP: 002b:00007f70222adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.560187][T10703] RAX: ffffffffffffffda RBX: 000000000001c340 RCX: 000000000045d189 [ 278.568208][T10703] RDX: 0000000020000000 RSI: 0000000000004b4a RDI: 0000000000000003 [ 278.576294][T10703] RBP: 00007f70222adca0 R08: 0000000000000000 R09: 0000000000000000 23:25:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) [ 278.584284][T10703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.592279][T10703] R13: 00007ffd94107ecf R14: 00007f70222ae9c0 R15: 000000000118cf4c 23:25:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x400448c9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x40186366, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 278.703705][T10703] ERROR: Out of memory at tomoyo_realpath_from_path. 23:25:04 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 278.857342][T10728] FAULT_INJECTION: forcing a failure. [ 278.857342][T10728] name failslab, interval 1, probability 0, space 0, times 0 [ 278.910626][T10728] CPU: 0 PID: 10728 Comm: syz-executor.5 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 278.920219][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.930296][T10728] Call Trace: [ 278.933607][T10728] dump_stack+0x18f/0x20d [ 278.937992][T10728] should_fail.cold+0x5/0x14 [ 278.942612][T10728] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 278.948001][T10728] should_failslab+0x5/0xf [ 278.952425][T10728] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 278.958502][T10728] __kmalloc+0x6f/0x320 [ 278.962665][T10728] ? __d_path+0x160/0x160 [ 278.967004][T10728] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 278.972567][T10728] tomoyo_encode2.part.0+0xe9/0x3a0 [ 278.977780][T10728] tomoyo_encode+0x28/0x50 [ 278.982211][T10728] tomoyo_realpath_from_path+0x186/0x620 [ 278.987867][T10728] tomoyo_path_number_perm+0x1cb/0x4d0 [ 278.993341][T10728] ? tomoyo_path_number_perm+0x183/0x4d0 [ 278.998996][T10728] ? tomoyo_execute_permission+0x470/0x470 [ 279.004816][T10728] ? delayed_put_pid+0x30/0x30 [ 279.009596][T10728] ? find_held_lock+0x2d/0x110 [ 279.014380][T10728] ? ksys_write+0x212/0x250 [ 279.018918][T10728] ? __mutex_unlock_slowpath+0xe2/0x610 [ 279.024494][T10728] ? __fget_files+0x294/0x400 [ 279.029202][T10728] security_file_ioctl+0x50/0xb0 [ 279.034162][T10728] __x64_sys_ioctl+0xb3/0x200 [ 279.038854][T10728] do_syscall_64+0x2d/0x70 [ 279.043285][T10728] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 279.049182][T10728] RIP: 0033:0x45d189 [ 279.053083][T10728] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.072695][T10728] RSP: 002b:00007f70222adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.081122][T10728] RAX: ffffffffffffffda RBX: 000000000001c340 RCX: 000000000045d189 [ 279.089100][T10728] RDX: 0000000020000000 RSI: 0000000000004b4a RDI: 0000000000000003 [ 279.097078][T10728] RBP: 00007f70222adca0 R08: 0000000000000000 R09: 0000000000000000 23:25:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x800442d4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) [ 279.105053][T10728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.113032][T10728] R13: 00007ffd94107ecf R14: 00007f70222ae9c0 R15: 000000000118cf4c 23:25:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:05 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x80045432, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x400454ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) [ 279.355258][T10728] ERROR: Out of memory at tomoyo_realpath_from_path. 23:25:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x80045440, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40045506, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4004550a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x80086301, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) 23:25:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2, &(0x7f0000000000)) 23:25:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) 23:25:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40085503, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) 23:25:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x10, &(0x7f0000000000)) 23:25:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:25:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4008ae6a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)) 23:25:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4008f50a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f0000000000)) 23:25:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:25:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b31, &(0x7f0000000000)) 23:25:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, 0x0, 0x0) 23:25:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:25:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40095505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) 23:25:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b32, &(0x7f0000000000)) 23:25:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40186366, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) 23:25:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b33, &(0x7f0000000000)) 23:25:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, 0x0, 0x0) 23:25:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) 23:25:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b34, &(0x7f0000000000)) 23:25:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x8}) 23:25:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4090ae82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:25:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b35, &(0x7f0000000000)) 23:25:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8}) 23:25:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, 0x0, 0x0) 23:25:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x41015500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:25:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b36, &(0x7f0000000000)) 23:25:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x8}) 23:25:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b37, &(0x7f0000000000)) 23:25:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x8}) 23:25:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045432, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 23:25:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045440, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:25:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x8}) 23:25:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3a, &(0x7f0000000000)) 23:25:10 executing program 1 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80085502, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80086301, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3b, &(0x7f0000000000)) 23:25:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x8}) 23:25:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 284.286991][T10967] FAULT_INJECTION: forcing a failure. [ 284.286991][T10967] name failslab, interval 1, probability 0, space 0, times 0 [ 284.352059][T10967] CPU: 1 PID: 10967 Comm: syz-executor.1 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 284.361641][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.371707][T10967] Call Trace: [ 284.375012][T10967] dump_stack+0x18f/0x20d [ 284.379366][T10967] should_fail.cold+0x5/0x14 [ 284.383977][T10967] should_failslab+0x5/0xf [ 284.388404][T10967] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 284.394487][T10967] kmem_cache_alloc+0x46/0x3a0 [ 284.399267][T10967] ? __bpf_address_lookup+0x290/0x290 [ 284.404653][T10967] vm_area_dup+0x88/0x2b0 [ 284.409001][T10967] ? mark_lock+0xbc/0x1710 [ 284.413434][T10967] ? unwind_next_frame+0xe3b/0x1f90 [ 284.418645][T10967] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 284.424733][T10967] ? __lock_acquire+0xbb5/0x5640 [ 284.429698][T10967] ? mark_lock+0xbc/0x1710 [ 284.434134][T10967] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 284.440137][T10967] ? __lock_acquire+0x16cb/0x5640 [ 284.445194][T10967] ? vm_area_alloc+0x110/0x110 23:25:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 284.449969][T10967] ? lock_acquire+0x1f1/0xad0 [ 284.454661][T10967] ? __lock_acquire+0x16cb/0x5640 [ 284.459711][T10967] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 284.465706][T10967] ? vmacache_find+0x62/0x310 [ 284.470403][T10967] __split_vma+0xa5/0x560 [ 284.474782][T10967] __do_munmap+0x322/0x1170 [ 284.479304][T10967] ? lock_release+0x8e0/0x8e0 [ 284.484008][T10967] mmap_region+0x257/0x1780 [ 284.488537][T10967] ? get_unmapped_area+0x2ae/0x3d0 [ 284.493668][T10967] do_mmap+0xcf9/0x11d0 [ 284.497842][T10967] vm_mmap_pgoff+0x195/0x200 [ 284.502446][T10967] ? randomize_stack_top+0x100/0x100 [ 284.507752][T10967] ksys_mmap_pgoff+0x43a/0x560 [ 284.512524][T10967] ? find_mergeable_anon_vma+0x240/0x240 [ 284.518168][T10967] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 284.524163][T10967] ? trace_hardirqs_on+0x5f/0x220 [ 284.529204][T10967] ? lockdep_hardirqs_on+0x76/0xf0 [ 284.534343][T10967] do_syscall_64+0x2d/0x70 [ 284.538801][T10967] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 284.544699][T10967] RIP: 0033:0x45d189 [ 284.548602][T10967] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.568227][T10967] RSP: 002b:00007f2e515a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 284.576662][T10967] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 [ 284.584650][T10967] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 284.592645][T10967] RBP: 00007f2e515a9ca0 R08: 0000000000000006 R09: 0000000000000000 [ 284.600642][T10967] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 284.608638][T10967] R13: 00007ffc3ea5535f R14: 00007f2e515aa9c0 R15: 000000000118cf4c 23:25:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:25:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x8}) 23:25:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3c, &(0x7f0000000000)) 23:25:11 executing program 1 (fault-call:8 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) [ 285.117138][T11001] FAULT_INJECTION: forcing a failure. [ 285.117138][T11001] name failslab, interval 1, probability 0, space 0, times 0 [ 285.157102][T11001] CPU: 1 PID: 11001 Comm: syz-executor.1 Not tainted 5.8.0-next-20200812-syzkaller #0 23:25:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3d, &(0x7f0000000000)) [ 285.166686][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.176763][T11001] Call Trace: [ 285.180073][T11001] dump_stack+0x18f/0x20d [ 285.184418][T11001] should_fail.cold+0x5/0x14 [ 285.189057][T11001] should_failslab+0x5/0xf [ 285.193486][T11001] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 285.199578][T11001] kmem_cache_alloc+0x46/0x3a0 [ 285.204370][T11001] anon_vma_clone+0xe0/0x5f0 [ 285.208985][T11001] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 285.214986][T11001] __split_vma+0x179/0x560 [ 285.219426][T11001] __do_munmap+0x322/0x1170 [ 285.223951][T11001] ? lock_release+0x8e0/0x8e0 [ 285.228644][T11001] mmap_region+0x257/0x1780 [ 285.233170][T11001] ? get_unmapped_area+0x2ae/0x3d0 [ 285.238305][T11001] do_mmap+0xcf9/0x11d0 [ 285.242487][T11001] vm_mmap_pgoff+0x195/0x200 [ 285.247101][T11001] ? randomize_stack_top+0x100/0x100 [ 285.252407][T11001] ksys_mmap_pgoff+0x43a/0x560 [ 285.257183][T11001] ? find_mergeable_anon_vma+0x240/0x240 [ 285.262834][T11001] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 285.268826][T11001] ? trace_hardirqs_on+0x5f/0x220 [ 285.273861][T11001] ? lockdep_hardirqs_on+0x76/0xf0 [ 285.279027][T11001] do_syscall_64+0x2d/0x70 [ 285.283460][T11001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 285.289360][T11001] RIP: 0033:0x45d189 [ 285.293277][T11001] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:25:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b44, &(0x7f0000000000)) 23:25:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:25:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x8}) 23:25:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0085504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 285.312895][T11001] RSP: 002b:00007f2e515a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 285.321336][T11001] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 [ 285.329326][T11001] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 285.337311][T11001] RBP: 00007f2e515a9ca0 R08: 0000000000000006 R09: 0000000000000000 [ 285.345297][T11001] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 285.353278][T11001] R13: 00007ffc3ea5535f R14: 00007f2e515aa9c0 R15: 000000000118cf4c 23:25:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x8}) 23:25:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:25:12 executing program 1 (fault-call:8 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b45, &(0x7f0000000000)) 23:25:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}) 23:25:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:25:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 286.012521][T11039] FAULT_INJECTION: forcing a failure. [ 286.012521][T11039] name failslab, interval 1, probability 0, space 0, times 0 [ 286.075618][T11039] CPU: 0 PID: 11039 Comm: syz-executor.1 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 286.085316][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.095420][T11039] Call Trace: [ 286.098735][T11039] dump_stack+0x18f/0x20d [ 286.103091][T11039] should_fail.cold+0x5/0x14 [ 286.107713][T11039] should_failslab+0x5/0xf [ 286.112153][T11039] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 286.118243][T11039] kmem_cache_alloc+0x46/0x3a0 [ 286.123025][T11039] vm_area_alloc+0x1c/0x110 [ 286.127541][T11039] mmap_region+0x8e5/0x1780 [ 286.132067][T11039] ? get_unmapped_area+0x2ae/0x3d0 [ 286.137198][T11039] do_mmap+0xcf9/0x11d0 [ 286.141392][T11039] vm_mmap_pgoff+0x195/0x200 [ 286.146013][T11039] ? randomize_stack_top+0x100/0x100 [ 286.151331][T11039] ksys_mmap_pgoff+0x43a/0x560 [ 286.156118][T11039] ? find_mergeable_anon_vma+0x240/0x240 [ 286.161768][T11039] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 286.167771][T11039] ? trace_hardirqs_on+0x5f/0x220 [ 286.172909][T11039] ? lockdep_hardirqs_on+0x76/0xf0 [ 286.178136][T11039] do_syscall_64+0x2d/0x70 [ 286.182572][T11039] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 286.188480][T11039] RIP: 0033:0x45d189 [ 286.192392][T11039] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.212012][T11039] RSP: 002b:00007f2e515a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 23:25:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) 23:25:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x32, 0x0, 0x0, 0x8}) [ 286.220455][T11039] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 [ 286.228437][T11039] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 286.236499][T11039] RBP: 00007f2e515a9ca0 R08: 0000000000000006 R09: 0000000000000000 [ 286.245705][T11039] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 286.253695][T11039] R13: 00007ffc3ea5535f R14: 00007f2e515aa9c0 R15: 000000000118cf4c 23:25:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 23:25:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b47, &(0x7f0000000000)) 23:25:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:25:12 executing program 1 (fault-call:8 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x48, 0x0, 0x0, 0x8}) 23:25:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b48, &(0x7f0000000000)) 23:25:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) [ 286.536428][T11066] FAULT_INJECTION: forcing a failure. [ 286.536428][T11066] name fail_page_alloc, interval 1, probability 0, space 0, times 1 23:25:12 executing program 1 (fault-call:8 fault-nth:4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4c, 0x0, 0x0, 0x8}) 23:25:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f0000000000)) 23:25:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) [ 286.599535][T11066] CPU: 1 PID: 11066 Comm: syz-executor.1 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 286.599588][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.599594][T11066] Call Trace: [ 286.599621][T11066] dump_stack+0x18f/0x20d [ 286.599644][T11066] should_fail.cold+0x5/0x14 [ 286.599664][T11066] __alloc_pages_nodemask+0x183/0x790 [ 286.599684][T11066] ? __lock_acquire+0x16cb/0x5640 [ 286.599701][T11066] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 286.599739][T11066] alloc_pages_current+0x187/0x280 [ 286.599763][T11066] pte_alloc_one+0x16/0x190 [ 286.599784][T11066] __pte_alloc+0x1b/0x310 [ 286.599806][T11066] __get_locked_pte+0x40d/0x5c0 [ 286.599827][T11066] vm_insert_page+0x3e2/0xba0 [ 286.599847][T11066] ? do_raw_spin_lock+0x120/0x2b0 [ 286.599865][T11066] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 286.599878][T11066] ? rwlock_bug.part.0+0x90/0x90 [ 286.599893][T11066] ? mutex_lock_io_nested+0xf60/0xf60 [ 286.599918][T11066] remap_vmalloc_range_partial+0x304/0x3b0 [ 286.599943][T11066] array_map_mmap+0x16c/0x1d0 [ 286.599962][T11066] bpf_map_mmap+0x221/0x490 [ 286.599981][T11066] mmap_region+0xc24/0x1780 [ 286.600008][T11066] do_mmap+0xcf9/0x11d0 [ 286.600034][T11066] vm_mmap_pgoff+0x195/0x200 [ 286.600058][T11066] ? randomize_stack_top+0x100/0x100 [ 286.600085][T11066] ksys_mmap_pgoff+0x43a/0x560 [ 286.600104][T11066] ? find_mergeable_anon_vma+0x240/0x240 [ 286.600123][T11066] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 286.600141][T11066] ? trace_hardirqs_on+0x5f/0x220 [ 286.600159][T11066] ? lockdep_hardirqs_on+0x76/0xf0 [ 286.600183][T11066] do_syscall_64+0x2d/0x70 [ 286.600203][T11066] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 286.600218][T11066] RIP: 0033:0x45d189 [ 286.600236][T11066] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.600247][T11066] RSP: 002b:00007f2e515a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 286.600267][T11066] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 23:25:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 23:25:13 executing program 1 (fault-call:8 fault-nth:5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x68, 0x0, 0x0, 0x8}) 23:25:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f0000000000)) [ 286.600278][T11066] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 286.600289][T11066] RBP: 00007f2e515a9ca0 R08: 0000000000000006 R09: 0000000000000000 [ 286.600300][T11066] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 286.600310][T11066] R13: 00007ffc3ea5535f R14: 00007f2e515aa9c0 R15: 000000000118cf4c [ 286.804963][T11080] FAULT_INJECTION: forcing a failure. [ 286.804963][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 286.804987][T11080] CPU: 1 PID: 11080 Comm: syz-executor.1 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 286.804998][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.805005][T11080] Call Trace: [ 286.805031][T11080] dump_stack+0x18f/0x20d [ 286.805054][T11080] should_fail.cold+0x5/0x14 [ 286.805075][T11080] should_failslab+0x5/0xf [ 286.805091][T11080] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 286.805108][T11080] kmem_cache_alloc+0x46/0x3a0 [ 286.805129][T11080] ptlock_alloc+0x1d/0x70 [ 286.805146][T11080] pte_alloc_one+0x68/0x190 [ 286.805162][T11080] __pte_alloc+0x1b/0x310 [ 286.805178][T11080] __get_locked_pte+0x40d/0x5c0 [ 286.805197][T11080] vm_insert_page+0x3e2/0xba0 [ 286.805214][T11080] ? do_raw_spin_lock+0x120/0x2b0 [ 286.805230][T11080] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 286.805242][T11080] ? rwlock_bug.part.0+0x90/0x90 [ 286.805256][T11080] ? mutex_lock_io_nested+0xf60/0xf60 [ 286.805281][T11080] remap_vmalloc_range_partial+0x304/0x3b0 [ 286.805303][T11080] array_map_mmap+0x16c/0x1d0 [ 286.805321][T11080] bpf_map_mmap+0x221/0x490 [ 286.805339][T11080] mmap_region+0xc24/0x1780 [ 286.805364][T11080] do_mmap+0xcf9/0x11d0 [ 286.805398][T11080] vm_mmap_pgoff+0x195/0x200 [ 286.805421][T11080] ? randomize_stack_top+0x100/0x100 [ 286.805448][T11080] ksys_mmap_pgoff+0x43a/0x560 [ 286.805465][T11080] ? find_mergeable_anon_vma+0x240/0x240 [ 286.805483][T11080] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 286.805499][T11080] ? trace_hardirqs_on+0x5f/0x220 [ 286.805514][T11080] ? lockdep_hardirqs_on+0x76/0xf0 [ 286.805534][T11080] do_syscall_64+0x2d/0x70 [ 286.805550][T11080] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 286.805564][T11080] RIP: 0033:0x45d189 [ 286.805581][T11080] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.805590][T11080] RSP: 002b:00007f2e515a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 286.805608][T11080] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 [ 286.805619][T11080] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 286.805629][T11080] RBP: 00007f2e515a9ca0 R08: 0000000000000006 R09: 0000000000000000 [ 286.805639][T11080] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000004 23:25:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x8}) 23:25:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4c, &(0x7f0000000000)) 23:25:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6c, 0x0, 0x0, 0x8}) 23:25:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) [ 286.805648][T11080] R13: 00007ffc3ea5535f R14: 00007f2e515aa9c0 R15: 000000000118cf4c 23:25:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 23:25:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4d, &(0x7f0000000000)) 23:25:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x74, 0x0, 0x0, 0x8}) 23:25:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 23:25:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8}) 23:25:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x2, 0x11, r2, 0x0) 23:25:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7a, 0x0, 0x0, 0x8}) 23:25:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 23:25:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4e, &(0x7f0000000000)) 23:25:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x8}) 23:25:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x8}) 23:25:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)) 23:25:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x201c, 0x2, 0x11, r2, 0x0) 23:25:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 23:25:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b62, &(0x7f0000000000)) 23:25:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 23:25:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x8}) 23:25:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x500, 0x0, 0x0, 0x8}) 23:25:15 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x201d, 0x2, 0x11, r2, 0x0) 23:25:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b63, &(0x7f0000000000)) 23:25:15 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b64, &(0x7f0000000000)) 23:25:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x8}) 23:25:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x8}) 23:25:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x5000, 0x2, 0x11, r2, 0x0) 23:25:15 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 23:25:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x700, 0x0, 0x0, 0x8}) 23:25:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x8}) 23:25:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b65, &(0x7f0000000000)) 23:25:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x2, 0x11, r2, 0x0) 23:25:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x32, 0x0, 0x0, 0x8}) 23:25:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x8cc, 0x0, 0x0, 0x8}) 23:25:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x2, 0x11, r2, 0x0) 23:25:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b72, &(0x7f0000000000)) 23:25:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x8}) 23:25:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 23:25:17 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) 23:25:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x900, 0x0, 0x0, 0x8}) 23:25:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfa, &(0x7f0000000000)) 23:25:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x500, 0x0, 0x0, 0x8}) 23:25:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xa00, 0x0, 0x0, 0x8}) 23:25:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfb, &(0x7f0000000000)) 23:25:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x8}) 23:25:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x2) 23:25:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3200, 0x0, 0x0, 0x8}) 23:25:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4c00, &(0x7f0000000000)) 23:25:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:25:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x700, 0x0, 0x0, 0x8}) 23:25:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3f00, 0x0, 0x0, 0x8}) 23:25:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1c) 23:25:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4c01, &(0x7f0000000000)) 23:25:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x8}) 23:25:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1d) 23:25:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x8d2, 0x0, 0x0, 0x8}) 23:25:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5409, &(0x7f0000000000)) 23:25:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x60) 23:25:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:25:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4c00, 0x0, 0x0, 0x8}) 23:25:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3200, 0x0, 0x0, 0x8}) 23:25:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540b, &(0x7f0000000000)) 23:25:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1c00) 23:25:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6800, 0x0, 0x0, 0x8}) 23:25:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540c, &(0x7f0000000000)) 23:25:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1d00) 23:25:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xd208, 0x0, 0x0, 0x8}) 23:25:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540d, &(0x7f0000000000)) 23:25:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) 23:25:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x2000) 23:25:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6c00, 0x0, 0x0, 0x8}) 23:25:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xff7f, 0x0, 0x0, 0x8}) 23:25:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540e, &(0x7f0000000000)) 23:25:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7400, 0x0, 0x0, 0x8}) 23:25:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x4000) 23:25:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540f, &(0x7f0000000000)) 23:25:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7a00, 0x0, 0x0, 0x8}) 23:25:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694"], 0x14}}, 0x0) 23:25:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8}) 23:25:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5410, &(0x7f0000000000)) 23:25:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x6000) 23:25:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 23:25:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xcc08, 0x0, 0x0, 0x8}) 23:25:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xff00, 0x0, 0x0, 0x8}) 23:25:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)) 23:25:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x200000) 23:25:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x8}) 23:25:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xff7f, 0x0, 0x0, 0x8}) 23:25:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x400000) 23:25:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694"], 0x14}}, 0x0) 23:25:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5413, &(0x7f0000000000)) 23:25:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x8}) 23:25:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x600000) 23:25:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5414, &(0x7f0000000000)) 23:25:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8}) 23:25:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x8}) 23:25:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5415, &(0x7f0000000000)) 23:25:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694"], 0x14}}, 0x0) 23:25:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x800000) 23:25:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5416, &(0x7f0000000000)) 23:25:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x8}) 23:25:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x8}) 23:25:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5418, &(0x7f0000000000)) 23:25:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x80ffff) 23:25:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f0000000000)) 23:25:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1000000) 23:25:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e5"], 0x14}}, 0x0) 23:25:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x8}) 23:25:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x8}) 23:25:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541d, &(0x7f0000000000)) 23:25:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x2000000) 23:25:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f0000000000)) 23:25:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1c000000) 23:25:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x32, 0x0, 0x8}) 23:25:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f0000000000)) 23:25:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e5"], 0x14}}, 0x0) 23:25:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x8}) 23:25:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1d000000) 23:25:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5421, &(0x7f0000000000)) 23:25:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x8}) 23:25:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5422, &(0x7f0000000000)) 23:25:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0xffff8000) 23:25:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x500, 0x0, 0x8}) 23:25:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x8}) 23:25:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e5"], 0x14}}, 0x0) 23:25:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5423, &(0x7f0000000000)) 23:25:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x400000000000) 23:25:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x600, 0x0, 0x8}) 23:25:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x8}) 23:25:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5424, &(0x7f0000000000)) 23:25:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0xffffffffffffd) 23:25:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x20000000000000) 23:25:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5425, &(0x7f0000000000)) 23:25:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038"], 0x14}}, 0x0) 23:25:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x700, 0x0, 0x8}) 23:25:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x8}) 23:25:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5427, &(0x7f0000000000)) 23:25:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x60000000000000) 23:25:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5428, &(0x7f0000000000)) 23:25:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x80000000000000) 23:25:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x8d2, 0x0, 0x8}) 23:25:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5429, &(0x7f0000000000)) 23:25:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x8}) 23:25:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038"], 0x14}}, 0x0) 23:25:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x80ffff00000000) 23:25:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5437, &(0x7f0000000000)) 23:25:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3200, 0x0, 0x8}) 23:25:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xa, 0x0, 0x8}) 23:25:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5441, &(0x7f0000000000)) 23:25:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x100000000000000) 23:25:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5450, &(0x7f0000000000)) 23:25:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xd208, 0x0, 0x8}) 23:25:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038"], 0x14}}, 0x0) 23:25:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x8}) 23:25:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x200000000000000) 23:25:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xff7f, 0x0, 0x8}) 23:25:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5451, &(0x7f0000000000)) 23:25:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5452, &(0x7f0000000000)) 23:25:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1c00000000000000) 23:25:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x32, 0x0, 0x8}) 23:25:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8"], 0x14}}, 0x0) 23:25:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x545d, &(0x7f0000000000)) 23:25:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x8}) 23:25:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x1d00000000000000) 23:25:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x48, 0x0, 0x8}) 23:25:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5460, &(0x7f0000000000)) 23:25:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x8000000000000000) 23:25:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8}) 23:25:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x4c, 0x0, 0x8}) 23:25:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x6364, &(0x7f0000000000)) 23:25:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8"], 0x14}}, 0x0) 23:25:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0xfdffffffffff0f00) 23:25:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x8}) 23:25:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x8933, &(0x7f0000000000)) 23:25:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x8}) 23:25:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x8}) 23:25:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0xffffffff00000000) 23:25:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x400448c9, &(0x7f0000000000)) 23:25:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6c, 0x0, 0x8}) 23:25:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x8}) 23:25:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8"], 0x14}}, 0x0) 23:25:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x74, 0x0, 0x8}) 23:25:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x400448dd, &(0x7f0000000000)) 23:25:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xd, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x8}) 23:25:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x400454ca, &(0x7f0000000000)) 23:25:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x7a, 0x0, 0x8}) 23:25:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x8}) 23:25:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x0, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x2, 0x2, 0x8}, 0xcbe}}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000202fd54c04e55fdbc7003453d79a", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x10400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x0, 0xb, 0x8, 0xfffffffffffffff4, 0x10}, @ldst={0x1, 0x2, 0x3, 0x2, 0x3, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x62}, @ldst={0x1, 0x1, 0x2, 0xb, 0x5, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x4, 0x0, 0x6, 0xffffffffffffffee}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1b, &(0x7f0000000240)=""/27, 0x41000, 0x1, [], r5, 0xf, r1, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xe, 0x6, 0x6}, 0x10, 0xffffffffffffffff, r6}, 0x78) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) getsockopt$packet_int(r7, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x8}) [ 304.965244][T11859] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.975965][T11860] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.336705][ T0] NOHZ: local_softirq_pending 08 23:25:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x300, 0x8}) 23:25:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x3, 0x9, 0xd00}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@null=' \x00', 0xa, 'netpci0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100)=0xfffff3d4, 0x4) 23:25:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40049409, &(0x7f0000000000)) 23:25:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x500, 0x0, 0x8}) 23:25:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x8}) 23:25:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x600, 0x0, 0x8}) 23:25:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40186366, &(0x7f0000000000)) 23:25:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x804, 0x9, 0x440, 0xffffffffffffffff, 0x0, [], r5}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) getsockopt$packet_int(r6, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x500, 0x8}) 23:25:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x8}) 23:25:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x700, 0x0, 0x8}) [ 305.846512][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x600, 0x8}) 23:25:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x8}) 23:25:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4020940d, &(0x7f0000000000)) [ 305.965424][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x4d5}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x8cc, 0x0, 0x8}) 23:25:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x700, 0x8}) 23:25:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045432, &(0x7f0000000000)) 23:25:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x900, 0x0, 0x8}) 23:25:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:32 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8d2, 0x8}) 23:25:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045440, &(0x7f0000000000)) 23:25:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80010, r2, 0x0) 23:25:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x3200, 0x8}) 23:25:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xa00, 0x0, 0x8}) 23:25:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80086301, &(0x7f0000000000)) 23:25:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3200, 0x0, 0x8}) 23:25:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xd208, 0x8}) 23:25:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)) 23:25:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x6, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x40) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0xaaea}, 0x40) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000200)={0x1, 'ip6gretap0\x00', {}, 0x1}) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f00000001c0)=0x8) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3f00, 0x0, 0x8}) 23:25:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x4, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)) 23:25:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xff7f, 0x8}) 23:25:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(r4, r5, 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000100)={0x7f}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x1b, 0x47, &(0x7f00000002c0)="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"}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x4800, 0x0, 0x8}) 23:25:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x4c00, 0x0, 0x8}) 23:25:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, &(0x7f0000000000)) 23:25:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}) 23:25:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x14, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6800, 0x0, 0x8}) 23:25:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc020660b, &(0x7f0000000000)) 23:25:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6c00, 0x0, 0x8}) 23:25:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x7, 0x200f}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x13, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @isdn={0x22, 0x5, 0x4, 0xf9, 0xf5}, @in={0x2, 0x4e24, @multicast1}, @l2={0x1f, 0x5, @fixed={[], 0x11}, 0x0, 0x2}, 0x205c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}) getsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xfec8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x7400, 0x0, 0x8}) 23:25:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x2}) 23:25:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1400, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x100, 0x0) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180)={[0xac2]}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='@$*[$\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) 23:25:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x2}) 23:25:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x7a00, 0x0, 0x8}) 23:25:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x3}) 23:25:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xcc08, 0x0, 0x8}) 23:25:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) 23:25:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x4}) 23:25:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4000004, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x400e6, [], 0x0, 0xffffffffffffffff, 0x5}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3}) 23:25:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x40000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) 23:25:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xff00, 0x0, 0x8}) 23:25:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x5}) 23:25:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = accept(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000000)=0x80) ioctl$FITHAW(r1, 0xc0045878) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) getsockopt$packet_int(r5, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) 23:25:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x4}) 23:25:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1000000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:25:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xff7f, 0x0, 0x8}) 23:25:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x6}) 23:25:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) time(&(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) 23:25:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x5}) 23:25:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:25:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x14000000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x7}) 23:25:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1e, 0x4, 0x800, 0x3, 0x0, 0xffffffffffffffff, 0x20000}, 0x40) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x200000) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000200)={0x8, 0x2d, 0x8, 0x9, 0x7, 0xe99217e, 0x3, 0x120}) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) write$proc_mixer(r6, &(0x7f0000000000)=[{'DIGITAL2', @val={' \'', 'Master Capture Switch', '\' '}}], 0x36) 23:25:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:25:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6}) 23:25:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x8}) 23:25:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x8}) 23:25:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x3b9ac9ff, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x800) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000100)={@null, @null, @null, 0x63, 0x1, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x7a00, 0x0, 0x8}) 23:25:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0xffc99a3b, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x300}) 23:25:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8}) 23:25:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7}) 23:25:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000240)={@loopback, r5}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x821911c1c9016e04}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @loopback}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) getsockopt$packet_int(r6, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xff7f, 0x8}) 23:25:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x500}) 23:25:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0xffffff7f, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x8}) 23:25:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x32}) [ 310.122967][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.183415][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:36 executing program 2 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x600}) 23:25:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x4000000000000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000000)={{0xffffffff, 0x7fff}, 0x1e}, 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x300}) 23:25:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x8}) [ 310.399893][T12184] FAULT_INJECTION: forcing a failure. [ 310.399893][T12184] name failslab, interval 1, probability 0, space 0, times 0 23:25:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x500}) [ 310.461526][T12184] CPU: 0 PID: 12184 Comm: syz-executor.2 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 310.471139][T12184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.481211][T12184] Call Trace: [ 310.484522][T12184] dump_stack+0x18f/0x20d [ 310.488872][T12184] should_fail.cold+0x5/0x14 [ 310.493479][T12184] should_failslab+0x5/0xf [ 310.497906][T12184] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 310.503987][T12184] kmem_cache_alloc+0x46/0x3a0 [ 310.508766][T12184] ? arch_get_unmapped_area+0x560/0x560 [ 310.514335][T12184] vm_area_alloc+0x1c/0x110 [ 310.518853][T12184] mmap_region+0x8e5/0x1780 [ 310.523374][T12184] ? get_unmapped_area+0x2ae/0x3d0 [ 310.528506][T12184] do_mmap+0xcf9/0x11d0 [ 310.532687][T12184] vm_mmap_pgoff+0x195/0x200 [ 310.537300][T12184] ? randomize_stack_top+0x100/0x100 [ 310.542634][T12184] ksys_mmap_pgoff+0x43a/0x560 [ 310.547416][T12184] ? find_mergeable_anon_vma+0x240/0x240 [ 310.553067][T12184] ? lockdep_hardirqs_on_prepare+0x354/0x530 23:25:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x700}) [ 310.559705][T12184] ? trace_hardirqs_on+0x5f/0x220 [ 310.559759][T12184] ? lockdep_hardirqs_on+0x76/0xf0 [ 310.569900][T12184] do_syscall_64+0x2d/0x70 [ 310.569925][T12184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 310.580238][T12184] RIP: 0033:0x45d189 23:25:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x480000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8) r4 = dup3(0xffffffffffffffff, r1, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x80000000, 0x800, 0x9, 0x2, r4}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)="0fbabcf7b90c863b657219ed56465902ff0175f3f8aba021bf6fe3634721b8eb121cfdb7609b105132732a50473f5e8648263843075d98bdef4369b07a645a4dda17ff22ced49274173524243c71d32d57d6d9711bdbb7795042fddbec723f6ad92af2d6b68d32fc3ed678017929c4ffce03c035265f7e67025ab0ac00bb408277be5165e001fa408fa91bdb0483dacb3b844300e9d6ce15dc3d0d1906d758d8caecd8b5a4a831bfbe4548572774b32889b44e7d3cdd0462", 0xb8, r1}, 0x68) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) getsockopt$packet_int(r5, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) [ 310.580254][T12184] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.580262][T12184] RSP: 002b:00007f9b35684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 310.580281][T12184] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 23:25:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0xff00}) [ 310.580291][T12184] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 310.580301][T12184] RBP: 00007f9b35684ca0 R08: 0000000000000006 R09: 0000000000000000 23:25:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x646}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000002c0)=0xfffffffe, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0x10000, 0x3, r1, 0x0, &(0x7f0000000000)={0x9c090a, 0x5, [], @ptr=0x2efb}}) getsockopt$packet_int(r5, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6=@private0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) chown(0x0, r7, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="78696e6f3d6175746f2c776f726b6469723d2e2f66696c65302c6e66735f6578706f72743daa67662c776f726b6469723d2e2f66696c65302c696e6465783d6f66662c72656469726563e08f798552e0dca418641381b79b745f6469723d2e2f66696c65312c78696e6f3d6175746f2c64656661756c745f707072616973652c6673636f6e746578743d726f6f742c646f6e745f61707072616973652c7569643e00000000000000000000000000d9482bd7c3cd66d773e511fc701a964b507aac21eecf69547126bce1ae010b507dfe83bc2707f14ebc434c870e51", @ANYRESDEC=r7, @ANYBLOB=',smackfshat=%9],dont_measure,hash,\x00']) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000380)="3781f5496f741ec0cd5c5423b20d109f33a5460c33f0814f693eed13d696ef64b03d81542812244097e48550b94a6fba57fa45f8f8115a9e3a4d5b7513c0bfecd565145629051943e5955d7de70c8cc87614fefc8302d51eaee263df4d379ff665dfb1c73035b30766cd16a3fc24a8fda5b4dfe36f1c4ff39288227dd6441163c913b86514392a1e2a8f18afb9505b7d2367e9fc5643334565839600e781d05ff8bf20bf6d4f7d4ca36100b5d1", 0xad}, {&(0x7f0000000440)="7c01f65445b106aac1516a6de0e95836085b0ce0a44f6940eeaab3194b07a464c073dd3ea3df60e45d4b46050e92628e5fcea7b916edec46a34d17d6cf739831b87c0f514af3f4ab07407cbaac5032b73da1762d08", 0x55, 0x85}, {&(0x7f00000004c0)="5ae84372985383569b4a27abb2bf40a321c6f8b03cadb28bce883db8756be17fb87c6c1a49e945a2a4786ff0f23c2a", 0x2f, 0xc94}, {&(0x7f0000000500)="783463326e88802bddec29e9bf1fd759dc0715f24647de1f1a00d3529e8d0d5bb09b92f3f1bbd118b78fb4132208c36c7ffc59dd153ba5eb4bbc74c6ea8e256e8c09c3ea94c5455bbbfe1e6bbc8fc5bb4a0b31a7bd0c145a7035b7f6695906a1fc0581f37e50d405fc0005b6ea94ad333c83e41c7562e9418236d4cbfaeac32758aa9d79cf0b68dddeeaf8989b52628bbfd7165516fcd28f6473993c475717e023e24ae87e0c3efb4554e1c0c6a3ed4ccdf8dd272c287cac8b492fb768384735909d2f76235f58583a063f05bc50a638395cf8292ac39b197dde9d8a670c", 0xde, 0x1}, {&(0x7f0000000600)="9ca23536d86868c137cf096ebef9983ffcda8d88a3391c6f6935e9ea9a1b5f5ae22e7b76da4e0023b68aba0160a31169ef7eca9a510beab61c74fa0cea17b425eb8dea520a8123bbdc7a2132468af7a32e3c2641cab3f5ab078e1425c96b143410819de35d17130037ea9a824cc8b0bffad99b84c017625151ed42a35698f91ed10b11dd730ad6a54cbce5ee34a477585e029b3532b40d1cb8", 0x99, 0x100000001}, {&(0x7f00000006c0)="cdb09f85c85d820d41fe9cbb0142e3c3cdf1181517c22b6b11450f3293787de5cfe5a8a6dea1cbed18c8a4b3aae03d2dfe6994d12e6427a4a31ed9a20c65395dd128", 0x42, 0xffffffffffff7218}, {&(0x7f0000000740)="0cb78e61951320a90bbae627e31012743268ffdaf0bbdb2e476db390e099dfc02cfe3095057f227faf2416adbcd6d067b2940b4604b38b66625de0f02b17d60caa14e6b817517c09e574f8a5a255881e9849660e0dea5e", 0x57, 0x7fffffff}, {&(0x7f00000007c0)="c80d53e302472ed646ab035eebbcf5d922e7b9925b139d3a4dac068415bca83f8010f889d7ce577e541662cee57f36383f26b687ada9d78228abc949b949de41fcf02511b1c5a963b3a86d80812796332977b92aea45d615e0242a4e8a3d411d67148d8925656f5782f0994ac18650c6873e7ecb1083d1a688e7b51d76b7f0a08dd856059d9f1038a86ce91d499731fbb44329ff6f4abcc3115be12702f5176e4f7adf07fc57396ec041969c945cd7a7bfe99679592daf720c9779be3d38260e47c1cd72732c033345279095dac817ecff27438477c546c56dfbf20f8be402f9e35f205476bb1bc3ae98ee7d1fa23a3565034eedf7", 0xf5, 0xfffffffeffffffff}], 0x80, &(0x7f0000000980)=ANY=[@ANYBLOB="6e6f6a6f75726e616c5f636865636b73756d2c6e6f4156ceacc9175e266c617a7974696d652c75756f74612c6e6f696e69745f697461626c652c6e6f646973636172642c6e6f6a6f75726e616c5f63686563008000002c62682c6a6f75726e616c5f6173796e635f636f6d6d69742c6f626a5f726f6c653d28282c657569643e49fc00095f90b410d33e206df9b8a3ea79f2626d1d9da493d4285160c1175c1755418d42c55240c5c83b8533bff08f0a4761d726900cda8f6165fae9094746fdd342fce65c0a6b846f27f21b22ec5bafe39b9bf0b61d8a118568d628ce51b83a585e16477b8a3258928182886ab1", @ANYRESDEC=r7, @ANYBLOB="9624180b1e5330e16c6b8bbaf98252a6cb13f999f98ccebf00019f6c32c096bb3137e6ff77b5dfc8f9fd7b58d78ad8591f2456c46fbe176bb1e823d5171bff1d2ad9c1b1f8e537b3377ca435f898f8d78ea70fe3eeea324526191cfcc544c291cc3ea624e10214f7394838fd24358a3188d268e10da6fdfd3e332f359afaae2ac4112d9be586bd5b1d8bdb0103a9fba13664c008f0197d041a5d54775b77bf3e40e1c72f"]) [ 310.580310][T12184] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 310.580319][T12184] R13: 00007fff92f01adf R14: 00007f9b356859c0 R15: 000000000118cf4c 23:25:37 executing program 2 (fault-call:6 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x8}) [ 310.935029][T12211] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 311.023746][T12216] overlayfs: unrecognized mount option "nfs_export=ªgf" or missing value [ 311.028564][T12218] FAULT_INJECTION: forcing a failure. [ 311.028564][T12218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.056240][T12218] CPU: 0 PID: 12218 Comm: syz-executor.2 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 311.065834][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.075893][T12218] Call Trace: [ 311.079203][T12218] dump_stack+0x18f/0x20d [ 311.083549][T12218] should_fail.cold+0x5/0x14 [ 311.088151][T12218] __alloc_pages_nodemask+0x183/0x790 [ 311.093532][T12218] ? __lock_acquire+0x16cb/0x5640 [ 311.098568][T12218] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 311.105356][T12218] alloc_pages_current+0x187/0x280 [ 311.110514][T12218] pte_alloc_one+0x16/0x190 [ 311.115029][T12218] __pte_alloc+0x1b/0x310 [ 311.119370][T12218] __get_locked_pte+0x40d/0x5c0 [ 311.124243][T12218] vm_insert_page+0x3e2/0xba0 [ 311.128931][T12218] ? do_raw_spin_lock+0x120/0x2b0 [ 311.133962][T12218] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 311.139512][T12218] ? rwlock_bug.part.0+0x90/0x90 [ 311.144456][T12218] ? mutex_lock_io_nested+0xf60/0xf60 [ 311.149845][T12218] remap_vmalloc_range_partial+0x304/0x3b0 [ 311.155667][T12218] array_map_mmap+0x16c/0x1d0 [ 311.160361][T12218] bpf_map_mmap+0x221/0x490 [ 311.164873][T12218] ? memset+0x20/0x40 [ 311.168864][T12218] mmap_region+0xc24/0x1780 [ 311.173414][T12218] do_mmap+0xcf9/0x11d0 [ 311.177594][T12218] vm_mmap_pgoff+0x195/0x200 [ 311.182208][T12218] ? randomize_stack_top+0x100/0x100 [ 311.187512][T12218] ksys_mmap_pgoff+0x43a/0x560 [ 311.192297][T12218] ? find_mergeable_anon_vma+0x240/0x240 [ 311.197953][T12218] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 311.203943][T12218] ? trace_hardirqs_on+0x5f/0x220 [ 311.208973][T12218] ? lockdep_hardirqs_on+0x76/0xf0 [ 311.214094][T12218] do_syscall_64+0x2d/0x70 [ 311.218545][T12218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 311.224443][T12218] RIP: 0033:0x45d189 [ 311.228341][T12218] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.247954][T12218] RSP: 002b:00007f9b35684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 311.256377][T12218] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 [ 311.266385][T12218] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 311.274368][T12218] RBP: 00007f9b35684ca0 R08: 0000000000000006 R09: 0000000000000000 [ 311.282344][T12218] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 311.290323][T12218] R13: 00007fff92f01adf R14: 00007f9b356859c0 R15: 000000000118cf4c 23:25:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x100000000000000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x600}) 23:25:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x2}) 23:25:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x8}) 23:25:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup2(r3, r6) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r6, 0x8ed6000) 23:25:37 executing program 2 (fault-call:6 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x700}) 23:25:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8}) [ 311.576349][T12240] FAULT_INJECTION: forcing a failure. [ 311.576349][T12240] name failslab, interval 1, probability 0, space 0, times 0 [ 311.589184][T12240] CPU: 0 PID: 12240 Comm: syz-executor.2 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 311.598748][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.608825][T12240] Call Trace: [ 311.612146][T12240] dump_stack+0x18f/0x20d [ 311.616513][T12240] should_fail.cold+0x5/0x14 [ 311.621132][T12240] should_failslab+0x5/0xf 23:25:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x6, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000002c0)={{0x0, 0x0, 0x80}}) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup2(r4, r7) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000100)=0x5e) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401012fc, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000000)=0xffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) [ 311.625588][T12240] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 311.631681][T12240] kmem_cache_alloc+0x46/0x3a0 [ 311.636477][T12240] ptlock_alloc+0x1d/0x70 [ 311.640838][T12240] pte_alloc_one+0x68/0x190 [ 311.645368][T12240] __pte_alloc+0x1b/0x310 [ 311.649720][T12240] __get_locked_pte+0x40d/0x5c0 [ 311.654599][T12240] vm_insert_page+0x3e2/0xba0 [ 311.659297][T12240] ? do_raw_spin_lock+0x120/0x2b0 [ 311.664338][T12240] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 311.669895][T12240] ? rwlock_bug.part.0+0x90/0x90 [ 311.674847][T12240] ? mutex_lock_io_nested+0xf60/0xf60 [ 311.680241][T12240] remap_vmalloc_range_partial+0x304/0x3b0 [ 311.686072][T12240] array_map_mmap+0x16c/0x1d0 [ 311.690769][T12240] bpf_map_mmap+0x221/0x490 [ 311.695286][T12240] ? memset+0x20/0x40 [ 311.699311][T12240] mmap_region+0xc24/0x1780 [ 311.703833][T12240] do_mmap+0xcf9/0x11d0 [ 311.708014][T12240] vm_mmap_pgoff+0x195/0x200 [ 311.712621][T12240] ? randomize_stack_top+0x100/0x100 [ 311.717922][T12240] ksys_mmap_pgoff+0x43a/0x560 [ 311.722692][T12240] ? find_mergeable_anon_vma+0x240/0x240 [ 311.728328][T12240] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 311.734308][T12240] ? trace_hardirqs_on+0x5f/0x220 [ 311.739335][T12240] ? lockdep_hardirqs_on+0x76/0xf0 [ 311.744450][T12240] do_syscall_64+0x2d/0x70 [ 311.748868][T12240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 311.754759][T12240] RIP: 0033:0x45d189 23:25:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x3}) [ 311.758657][T12240] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.778265][T12240] RSP: 002b:00007f9b35684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 311.786690][T12240] RAX: ffffffffffffffda RBX: 000000000001ff40 RCX: 000000000045d189 [ 311.794661][T12240] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 311.802638][T12240] RBP: 00007f9b35684ca0 R08: 0000000000000006 R09: 0000000000000000 [ 311.810615][T12240] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 311.818594][T12240] R13: 00007fff92f01adf R14: 00007f9b356859c0 R15: 000000000118cf4c 23:25:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8d2}) 23:25:38 executing program 2 (fault-call:6 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1400000000000000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x4}) 23:25:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3200}) 23:25:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x8}) 23:25:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xa, 0x8}) 23:25:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x5}) 23:25:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xd208}) 23:25:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r2, 0x0) 23:25:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x6}) 23:25:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x8}) 23:25:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xff7f}) 23:25:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0xffc99a3b00000000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x0, 0x11, r2, 0x0) 23:25:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x7}) 23:25:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x8}) 23:25:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) 23:25:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x8}) 23:25:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0xffffff7f00000000, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x2}) 23:25:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x48, 0x8}) 23:25:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x11, r2, 0x0) 23:25:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x300}) 23:25:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x3}) 23:25:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x500}) 23:25:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x4}) 23:25:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) 23:25:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x600}) 23:25:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x4c, 0x8}) 23:25:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x700}) 23:25:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x5}) 23:25:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60, 0x11, r2, 0x0) 23:25:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x68, 0x8}) 23:25:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/5, 0x5}], 0x6, &(0x7f00000015c0)=""/236, 0xec}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/69, 0x45}, {&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f00000017c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/28, 0x1c}], 0x4, &(0x7f0000001880)=""/7, 0x7}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/47, 0x2f}, {&(0x7f0000001900)=""/77, 0x4d}], 0x2, &(0x7f00000019c0)=""/120, 0x78}, 0x9}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001a40)=""/129, 0x81}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/113, 0x71}, {&(0x7f0000002b80)=""/134, 0x86}, {&(0x7f0000002c40)=""/82, 0x52}, {&(0x7f0000002cc0)=""/171, 0xab}, {&(0x7f0000002d80)=""/187, 0xbb}], 0x7, &(0x7f0000003000)=""/27, 0x1b}, 0x4}], 0x4, 0x0, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003040)=ANY=[@ANYBLOB="110004004300063f38ddb70694080096ed505a1c7556ec22d76be96c9edd4aacb42632763b6205ace6f2107d9fed7e683808317f38dc5a0f51a08d995219f88110a3397e3f8e5d86d15dd1413cbea3f8cb3815229bfc77690d1e776117095ea03339503cb231cf4d5d743b0c741c9d362cdda766fca60bbe7ed84d4ca4855ed630258ec978472b4e6a4f06379a749e0e157bbf26abcd35943b7375ee22e20e0768bab0fadd283014ede4120ea555bb"], 0x14}}, 0x0) 23:25:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0xff00}) 23:25:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x6}) 23:25:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x11, r2, 0x0) 23:25:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x6c, 0x8}) 23:25:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x7}) 23:25:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x2}) 23:25:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x11, r2, 0x0) 23:25:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x32}) 23:25:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x3}) 23:25:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x74, 0x8}) 23:25:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/81, 0x51}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/161, 0xa1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/34, 0x22}], 0x1, &(0x7f0000000340)=""/12, 0xc}, 0x1}, {{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/83, 0x53}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/126, 0x7e}, {&(0x7f00000035c0)=""/102400, 0x19000}, {&(0x7f0000001640)=""/23, 0x17}, {&(0x7f0000001680)=""/63, 0x3f}, {&(0x7f00000016c0)=""/25, 0x19}, {&(0x7f00000018c0)=""/184, 0xb8}, {&(0x7f00000017c0)=""/107, 0x6b}], 0x7, &(0x7f00000034c0)=""/218, 0xda}, 0x3006}, {{&(0x7f00000019c0)=@caif=@util, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/15, 0xf}, {&(0x7f0000001a80)=""/18, 0x12}, {&(0x7f0000001ac0)=""/109, 0x6d}], 0x3, &(0x7f0000001b80)=""/27, 0x1b}, 0x4}, {{&(0x7f0000001bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c40)=""/42, 0x2a}, {&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000001cc0)=""/147, 0x93}], 0x3}, 0x800005}, {{&(0x7f0000001dc0)=@xdp, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001e40)=""/101, 0x65}, {&(0x7f0000001ec0)=""/53, 0x35}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/111, 0x6f}, {&(0x7f0000003080)=""/220, 0xdc}, {&(0x7f0000003180)=""/33, 0x21}], 0x7, &(0x7f0000003240)=""/144, 0x90}, 0x864}], 0x7, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 23:25:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x7a, 0x8}) 23:25:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000, 0x11, r2, 0x0) 23:25:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x300}) 23:25:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x4}) 23:25:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000, 0x11, r2, 0x0) 23:25:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x5}) 23:25:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x500}) 23:25:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x300, 0x8}) 23:25:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x6}) 23:25:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000, 0x11, r2, 0x0) 23:25:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x600}) 23:25:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x3f, 0x4a, 0xfff}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x500, 0x8}) 23:25:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x700}) 23:25:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x7}) 23:25:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x600000, 0x11, r2, 0x0) 23:25:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x600, 0x8}) 23:25:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, 0x2, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0xac, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) 23:25:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x8d2}) 23:25:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x11, r2, 0x0) 23:25:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x8}) 23:25:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x700, 0x8}) 23:25:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x3200}) 23:25:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8cc, 0x8}) 23:25:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x300}) 23:25:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xd208}) 23:25:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80ffff, 0x11, r2, 0x0) 23:25:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x900, 0x8}) 23:25:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x500}) 23:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x202, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x9, &(0x7f0000000880)=""/204, 0xcc}}], 0x1, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xff7f}) 23:25:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r2, 0x0) 23:25:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xa00, 0x8}) 23:25:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x600}) 23:25:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7, 0x3, 0x9, 0x8, 0x120, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x3, 0xfffffffa}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40004) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) getsockopt$packet_int(r5, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x460000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r6, 0x4010ae94, &(0x7f0000000240)={0x8, 0x1, 0x5}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40c080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7829}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x800, 0xfffffffffffeffff, 0x3ff, 0x7, 0x0, 0x6}) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xc887, 0x0, 0x0, 0x8, 0xf3}) 23:25:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x3200, 0x8}) 23:25:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x700}) 23:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) close(r1) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r2, 0x0) 23:25:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0xff00}) 23:25:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = gettid() tkill(r5, 0x33) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3f, 0x7f, 0x3, 0x1f, 0x0, 0x9, 0x88000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0xa}, 0x44, 0x10000, 0x9c7, 0x2, 0x6, 0x2, 0x1}, r5, 0x9, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r6 = gettid() tkill(r6, 0x33) syz_open_procfs(r6, &(0x7f0000000000)='oom_score_adj\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x410282, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 23:25:43 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x0, 0xfffd, 0x0, 0x8}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000017024007000300000000000000000000005f7c7167bc080000000000000030dc92baf32c7840db9b9759bd"], 0x10) 23:25:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x3f00, 0x8}) 23:25:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x11, r2, 0x0) 23:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x4800, 0x8}) 23:25:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90000, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1a, 0x4, 0x800, 0x9, 0x400, r2, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) 23:25:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xff00000a, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r2, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x2}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', r7, 0x29, 0x1, 0x5, 0x2, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, 0x10, 0x20, 0x746, 0xffffffe1}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x40}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0xa21c396c52589ecc) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffff8000, 0x11, r2, 0x0) 23:25:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x1a0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) 23:25:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x4c00, 0x8}) [ 317.892024][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.990529][T12561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) 23:25:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000, 0x11, r2, 0x0) 23:25:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 23:25:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000180)=""/173, &(0x7f0000000240)=0xad) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000000)=0x78) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x6800, 0x8}) 23:25:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000b00)) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000280)=""/186, 0xba}], 0x4, &(0x7f0000000380)=""/202, 0xca}, 0xaf}, {{&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/178, 0xb2}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)=""/75, 0x4b}, {&(0x7f00000007c0)=""/227, 0xe3}], 0x5, &(0x7f0000000940)=""/197, 0xc5}, 0x5}], 0x2, 0x0, &(0x7f0000000180)={0x77359400}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) dup2(r2, r6) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000b80)) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x14}}, 0x80) 23:25:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffd, 0x11, r2, 0x0) 23:25:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) 23:25:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x6c00, 0x8}) 23:25:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(0xffffffffffffffff, r4) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000100)=0x11) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup3(r5, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r7, 0x4000) 23:25:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 23:25:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x5bdf, 0x101, 0xa2, 0x0, 0x3, 0x40010000, r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20000000000000, 0x11, r2, 0x0) 23:25:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000002c0)={0x8, [[0x100, 0x4, 0x1, 0x9db, 0x3, 0x4, 0x7ff, 0x1f], [0x5, 0x7, 0x5, 0x9, 0x1, 0x41e, 0x0, 0x4], [0x6, 0xffff, 0x1f, 0x0, 0x9, 0xffff]], [], [{0xfffff800, 0x1, 0x1, 0x1}, {0xffffdd52, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x7ff}, {0x1, 0x7f, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x80000000, 0x0, 0x1}, {0x1f, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x53d042e4, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x6}, {0xfffffffe, 0x100, 0x0, 0x1}, {0x4, 0x3, 0x1, 0x1, 0x1, 0x1}], [], 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) [ 318.530970][T12617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x7400, 0x8}) 23:25:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) 23:25:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x40000000000000, 0x11, r2, 0x0) [ 318.661502][T12621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) dup3(r3, r1, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x7f, 0x1, 0x80000009, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x41a181) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x7a00, 0x8}) 23:25:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x1800}) 23:25:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60000000000000, 0x11, r2, 0x0) 23:25:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) 23:25:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYRES16=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], r5, 0xffffffffffffffff, 0x5}, 0x40) preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/237, 0xed}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000640)=""/116, 0x74}], 0x7, 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) getsockopt$packet_int(r7, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) 23:25:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000000000000, 0x11, r2, 0x0) 23:25:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xcc08, 0x8}) [ 319.326510][ T27] audit: type=1804 audit(1597274745.529:9): pid=12666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir883832098/syzkaller.CDxjeF/170/bus" dev="sda1" ino=15794 res=1 errno=0 [ 319.367699][ T27] audit: type=1800 audit(1597274745.559:10): pid=12666 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15794 res=0 errno=0 [ 319.418416][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.442453][ T27] audit: type=1804 audit(1597274745.559:11): pid=12666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir883832098/syzkaller.CDxjeF/170/bus" dev="sda1" ino=15794 res=1 errno=0 23:25:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() tkill(r2, 0x33) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002400)={r2, r1, 0x0, 0x2, &(0x7f00000023c0)='\xdc\x00'}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = accept4$unix(r1, &(0x7f0000002440)=@abs, &(0x7f00000024c0)=0x6e, 0x81000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) dup2(r6, r9) sendmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="5879c9bf59dff5e0010a5b9a6f8f7dadb20f2cb5476707204230999ced07ba9280b85c0d72aaf31e5d488b643e94046e346b6ff604b0ac", 0x37}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="4a4992acbd7dcc839864804f523a07c2fa5a4960ac92524463d1a3b36a611fccb608b596a9875b46cadf49df920668706d771faa7578a9afbeabccccfb4e64566df3b8e05ca9da093c7c9bafc7b62df9efa8494ee85d9e45fb05c76217bf6dfa289218b3ba3e36d130e8442eb3168ae04a96b6d19a1cefe8190c26f46d0ed15253f28d9346218b4686dba3653ac01a61b90f950b83f5993682ddd46e2de724cb043873b351a941f617b7f2d9e046", 0xae}, {&(0x7f0000002200)="164b04faeae71ace24dbd8c78183fe461d6a9ba36dd4e71f9f30a4718f7ea59c73ae6de5a9f7d0ca041d6c3a0d05b70a043ba34a486ffab38061f7906e1123b1e4fc95f898da1547624643155b4a7cb776fe748ae53c0a4d86cad0f6bbc2501cea14363040141f6478", 0x69}], 0x5, &(0x7f0000002500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r5, r1, r6, r0]}}], 0x98, 0x800}, 0xc810) 23:25:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}) [ 319.559074][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.567811][ T27] audit: type=1804 audit(1597274745.639:12): pid=12671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir883832098/syzkaller.CDxjeF/170/bus" dev="sda1" ino=15794 res=1 errno=0 23:25:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x2200) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xff00, 0x8}) 23:25:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80ffff00000000, 0x11, r2, 0x0) 23:25:45 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x10200) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x80, 0x1, 0x2087, 0x8, 0x1}) 23:25:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup3(r1, r2, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xff, 0x1, 0x8, 0x7, 0x2, 0x3, 0xfffffffd, 0x20f, 0x38, 0x63, 0x10001, 0xfff, 0x20, 0x1, 0x8d, 0x98cb, 0x9}, [{0x4, 0x3, 0x8, 0x4, 0x100, 0x2, 0x39a2, 0x9}, {0x2, 0x7e046e39, 0x7, 0x5, 0x213b, 0x5, 0x5}], "63bd1279f5f0e633be064e6c301fdd615dc1e1e6323d6322c7090e4abdeaf864e0da228b311f33eb3f8827b8e790901e536854521a86f16bf432e1c211fa4f222998546823d9ef462d36ca4b20634e0ba73c9f1da31c4fdd87d7c2e7f590d4d3a2cb2490e9060b5b850e18a16cc2d981ff8cafe61a7093dbd979f72c353a39d4d1c14e64d04566ab3a6aae328c22330e88c07e57c757e699487668264b6742e0d4255df605981d4ffca82a6ba10d38b40e1a32c3", [[], [], [], [], [], [], [], [], []]}, 0xa2c) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) ioctl$CHAR_RAW_BSZGET(r3, 0x80081270, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40c80, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup2(r4, r7) r8 = dup2(r7, r0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040), &(0x7f00000000c0)=0x10) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000c40)={0x20000, 0x0, [0x1, 0x2, 0x0, 0x100000000, 0x40, 0x100000000, 0x2, 0x10001]}) 23:25:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x500}) [ 319.754939][ T27] audit: type=1800 audit(1597274745.639:13): pid=12671 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15794 res=0 errno=0 23:25:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000000000000, 0x11, r2, 0x0) 23:25:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:25:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000100)={0x1, "9d2d419962d144496f5931de2808a2966c03fce27422d30c0f9113bb639c02f7", 0x1000, 0x80, 0x0, 0x10, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) [ 319.756015][ T27] audit: type=1804 audit(1597274745.639:14): pid=12666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir883832098/syzkaller.CDxjeF/170/bus" dev="sda1" ino=15794 res=1 errno=0 23:25:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x600}) 23:25:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xff7f, 0x8}) 23:25:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x0, 0x500, r1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) getsockopt$packet_int(r7, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000000000000, 0x11, r2, 0x0) 23:25:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}) 23:25:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x700}) 23:25:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000240)=0x84) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0xf82b04cd154da665, 0x0, 0x0, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004001}, 0x24000080) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000280)={'veth1_to_batadv\x00', {0x2, 0x4e21, @empty}}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup2(r0, r3) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000000)={0x4, 0x20}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) getsockopt$packet_int(r7, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) 23:25:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000000, 0x11, r2, 0x0) 23:25:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa}) 23:25:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff00}) 23:25:46 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8040, 0x0) bind$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x40, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = gettid() tkill(r1, 0x33) sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000084}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x3e9, 0x8, 0x70bd25, 0x25dfdbfd, {0x4, 0x0, 0x0, r1, 0x7, 0x2, 0x7fff, 0x3a, 0x0, 0xa1}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="11e500004200050694c5d896e53038d8ed"], 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f00000000c0)={"82359e7671743681e6780a78ae32225249e18b8b444a473c5bcf03a2bf84", 0x401, 0x1, 0x1, 0x1, 0x84, 0xffff, 0x7fff, 0x5, [0x0, 0x81, 0xfffffffe, 0xfffffffb, 0xaff, 0xffffff7e, 0x9, 0xff, 0xffff, 0x0, 0x8f4, 0x8001, 0x7, 0x10000, 0x3, 0x1, 0x0, 0x9, 0x7fff]}) 23:25:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) 23:25:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x11, r2, 0x0) 23:25:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x14}}, 0x0) 23:25:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}) 23:25:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={r4, 0x81, 0x1, [0x9]}, &(0x7f0000000080)=0xa) r5 = gettid() tkill(r5, 0x33) ptrace(0x4208, r5) 23:25:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfdffffffffff0f00, 0x11, r2, 0x0) 23:25:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10}) 23:25:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xfff}) 23:25:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x8c) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0xa223, 0x7, 0x6, 0x6}, 'syz1\x00', 0x34}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x3c1442) getsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}) 23:25:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x11, r2, 0x0) 23:25:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x190}) 23:25:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}) 23:25:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x8, 0x6, 0x800, 0x7}, 0x10) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) write$P9_RSTAT(r1, &(0x7f0000000040)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x100, 0x2, {0x40, 0x2, 0x7}, 0xc1000000, 0xffff, 0x1, 0x81, 0x2, '$$', 0x0, '', 0x9, '-]\\{\'^)!,', 0x2, '!#'}}, 0x47) 23:25:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}) 23:25:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x48040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x29, 0x3f, 0x2, 0x2, 0xf, @local, @private1, 0x8000, 0x1, 0x400, 0x3}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000740)={@private0, 0x3e, r6}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) getsockopt$packet_int(r7, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ed}) 23:25:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x2) 23:25:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:25:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x4) 23:25:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1a6d}, 0x40480, 0xa74c}, 0xffffffffffffffff, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0xff}) 23:25:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x2}) 23:25:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4f0, 0x800, 0x1ffc0, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xfffffffe, 0x5}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7}) 23:25:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x60) 23:25:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x84000, 0x3c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r7, 0xe37}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3}) 23:25:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffff1f}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x19}, {0x6, 0x11, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044090}, 0x800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 23:25:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xc, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x2000) 23:25:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x4}) 23:25:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3cd, 0x0, 0x2, 0x400, 0x1000}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0xa4200, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040)=0x2, 0x4) 23:25:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x408400, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x300}) 23:25:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x4000) 23:25:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2040, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x5}) 23:25:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x500}) 23:25:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x6000) 23:25:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000140)=0x8001, 0x4) sendto$unix(r1, &(0x7f00000000c0)="a0700900ee6e2201f8aa1f5eefb5bbd10cf5246835d992021bf7ba5f75d367c0f3e62005e8fedb669ea5ec2c1b665b08f1471a2d5f77e2dd5c73cdbcb590c2cb3b8eedbde1d17f7719c19d54c5eef7a5b28ae3b5717a7630d8f23e75b1de714fcaf07044cb0127371c6f896c91e6abe242979159422783164c", 0x79, 0x4010, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 23:25:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x80}) 23:25:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6}) 23:25:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x600}) 23:25:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x200000) 23:25:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xfffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0919, 0x9, [], @p_u8=&(0x7f0000000040)=0x9}}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r1, 0x4) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1ff, 0x14002) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c, 0xfffffffe}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup2(r3, r6) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x800004, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="47ff1e39c60368f8b60da0d565536f3d", @ANYRESHEX=r3, @ANYBLOB=',msize=0x0000000000000024,loose,cache=none,appraise,dont_appraise,fsuuid=3f`T628a-57af-8165-f87\x00-beU1911f,dont_hash,dont_hash,\x00']) 23:25:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d8ed"], 0x14}}, 0x0) 23:25:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x700}) 23:25:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x400000) 23:25:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x3f) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7}) 23:25:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x80c4, 0x0, 0x8, 0x8, 0x6ff, 0xfffe}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:25:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff00}) 23:25:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x600000) 23:25:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0)=0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8}) 23:25:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, [], [{0x3f, 0x3, 0x1ec2, 0x9c, 0x5, 0x6}, {0x7, 0x2, 0x5, 0x9, 0x7baf2f1f, 0x20}], [[], [], [], [], [], []]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0xf000, 0x0, 0x0, 0x9, 0x0, 0x1}) 23:25:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 23:25:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x800000) 23:25:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9}) 23:25:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r2}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0xff}, &(0x7f0000000100)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0x6}, 0x0, 0xfffffffdffffffff, r1, 0xa) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup2(r4, r7) r8 = fcntl$dupfd(r0, 0x406, r4) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401012fc, 0x0) getsockopt$packet_int(r9, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 23:25:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', r6}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x11) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 325.501438][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 325.562242][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x80ffff) [ 325.716191][T13036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xa}) 23:25:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 23:25:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$packet_int(r2, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) dup2(r3, r9) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x2010, r9, 0x0) [ 325.790926][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000000) 23:25:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0xfffffff8, 0x800, 0x9, 0x9}, 0x40) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60040804}, 0x20008010) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="002208000000082361d0aa76ef04"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="4015ae00000002362fe86c4797e4fc1512f8ba8ac1a5d5f87125148be2d3981f805efa335332cfe7b3ec69dd27f192e1a4b47b0fba20544aeee1cfe668334bf2013a68d850a3468bf79f59772c7a8373dbdb7287174946b95890e05e990ea6e48c6641aefdfc2ec65c57bda866035bef4b1e72a74bb85f0f662f23c4eba091bf9c7426b21bf591a6abcf6f8af5f18d7778c8ebcc8d383296bfc13ef519530ec2836ca90ff85b8baa86173017ff62285251c71627"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x85c9, 0x3, 0x4, 0x0, 0x28ad, 0x7, 0x1f, 0x1, 0xfc27, 0x5, 0xd9, 0x3}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x804c8c8ce8163300, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 23:25:52 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x8, 0x8}) 23:25:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x10}) 23:25:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x2000000) 23:25:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d0e, &(0x7f0000000040)) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000002c0)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x2, 0x40}, 0x8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="09e1b5c75e010000", @ANYRES16=r6, @ANYBLOB="3f02000000000000000041000000000000000c41f000001d001462726f616463617374d06c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000240), 0x4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xffffffffffffff0d, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20000080) 23:25:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) syz_open_dev$tty1(0xc, 0x4, 0x4) 23:25:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x4000000) 23:25:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 23:25:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x32}) 23:25:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0xffff8000) 23:25:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 23:25:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x46203, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, &(0x7f0000000400)={0x20, 0x24, 0xb2, {0xb2, 0xe, "3cf36ae57b958375adc37c4b2ba42a3c35de3bcd110c50cc63a4e60587b616fe86a8b9a39444f541b8dc6aaddf7f51cbde32f9d6392c58cf1aec6bc12b0e22aaf8fa50c269f36fc22584bb1a3dfe459a1f150c1bf0ec6b5059b5096eeb562a9a6d13735cc332e197babdd8963b882b7a44416affc35da5717a9811bfb2b5e7be3202b00c27a8e6a3f7921ce1306506dc3dfbbbbf7b8ef842b5fb494315aad88c8eda22de882dc26c09476e125ea27021"}}, &(0x7f0000000880)={0x0, 0x3, 0xad, @string={0xad, 0x3, "6d743c401bc8eb3b36f4a200aa36c862a197ac215686fe3648c8f1cf66e5a7db304d1d8e90ca1c56c593c090cafc7a0a2006057a6d679719ea46113f782b75e38cacd098079be4651d4c68bf01823ed10d16ae5fce3325cecab725dfc45bf544a04ee2063bb48e6120696ecf6989ad4f4624fd0d69eafa2957b19385a3f006248587bffecf27e149151a82e93fd1a8b489622bfacb2da0796146f77fc786b872132ef425dcbd7181d5a0c8"}}, &(0x7f00000001c0)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x3}, @global=@item_4={0x3, 0x1, 0x4, "fe44e350"}, @global=@item_4={0x3, 0x1, 0xb, "35119d2b"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe37d, 0x4, 0x1, {0x22, 0xeb6}}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000004c0)={0x20, 0x7, 0xe, "2fa39e7cdd6f8f31c292553812ba"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000009c0)={0x20, 0x1, 0x1c, "027ef4fbf3da56e5ee5b44a456ac22b683bb1c35c9df082d529b8890"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x4}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000280)={{0x0, 0x0, @reserved="b4b92a9262322d89e2a484bcf5d6280cd7fd409e4e26325d0d7e9a86ac1413b7"}, 0x48, 0x0, [], "61748116847cfbabd00f58af15a599f8fb2eb43c4f15282ee03e25d6652ffd55fd1e7bef2863753fe397688df719f2d3242da0c773608e89f28b969fafc725fb2a54cf6675002063"}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000140)={0x8, 0xa9b, &(0x7f0000000500)="fabc545cffdbcc2e360585cf2e281beb043046d2a4273e2053821b717d6f07a6eee29ff9fa7362524fe1a40876153d894ad2fe82ec4766f44f0e2a4c66be65b8b12b5e0c983189d9ef7e8f0df2f59098c9a19667e021d3a2f46eb5d2339e782d2543d7b0ef6f6310acaa3d1d83193087e698459b57373ca261634fc8e970ef2237fb1ed89a6c545503b6b60afdeb4faf5e8ac1b12227f4aac145cf681b1e30a08901c097a671771a7563eaac2f4136468d2f4001b2c5eb9dc7f62e310ef765d511aac4147c0f1e207961f88d27f2437acf63b2b2f9b63f1f5972164be32691663fafe9fbcc15e2ea6460b81099c6e3b6870dc3974c7d84", &(0x7f0000000600)="c21e7e4c2329f4902df723ac30d12baadc2dd62fb61a4c363195819ebcca571132560a6954793222e1c1366644f2d6e70bf7e1e62ff0a4133fee31397c0f5d0ddfc54b42f41fad27de59934d23a5cadee1d56e48c677dd17d72d6aa41a8b50adeae6c0ff061465851e01167d559ff4793585c56e1a365d60ce19efb1e91b180bef48b9ff4bb8366097a299d7800f9e3e620bc7205c57266e927dbd2a84676f4564fbf64aa88131228184672c058334d0a9f9a6998d599c01dd9445e6a697a9ffbef2366e5c1a2c4435528ae44ef78fcf2d6789782097c75d38e9b3", 0xf7, 0xdb}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="73a72953", @ANYRES16=r4, @ANYBLOB="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"], 0x54}}, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xfffffffffffffd94, &(0x7f0000000200)={&(0x7f00000000c0)={0xb, r4, 0x100, 0x60bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4020}, 0x5) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x48}) 23:25:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x400000000000) 23:25:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 23:25:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x4c}) 23:25:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = fsmount(r4, 0x0, 0xfd) recvfrom$l2tp(r5, &(0x7f0000000100)=""/74, 0x4a, 0x40000030, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0xffffffffffffd) 23:25:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 327.362693][ T8184] usb 1-1: new high-speed USB device number 5 using dummy_hcd 23:25:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x20000000000000) 23:25:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x68}) 23:25:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x100, 0x70bd26, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000100) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x528dc000) 23:25:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 327.652934][ T8184] usb 1-1: Using ep0 maxpacket: 16 [ 327.744104][T13168] tipc: All keys are flushed! [ 327.802809][ T8184] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 327.813775][T13172] tipc: All keys are flushed! [ 327.822292][ T8184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.834330][ T8184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.873160][ T8184] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 327.901092][ T8184] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 327.910871][ T8184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.928004][ T8184] usb 1-1: config 0 descriptor?? [ 328.434537][ T8184] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input5 [ 328.457352][ T8184] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input6 [ 328.511793][ T8184] kye 0003:0458:5013.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 328.846129][ T7595] usb 1-1: USB disconnect, device number 5 23:25:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) write$ppp(r1, &(0x7f0000000040)="f3a5ac4b296e05190551d4d52da0f0039813c418641a4dbd82d871b81e5009157af8b8e8241536cf153ad97c525b801ce5cca39af785d3988eb7c1fddf3b005a6bd75b8e56d36315b781964b8b1ec5626fbbb9ff638daff974dd8d7046c5431cef913812ab6d67aabbff44982a7b27783ab4549bac77bfd407bb8defa820", 0x7e) 23:25:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000000)={0xb, 0x1}) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x3, 0x7fff}) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) ioprio_set$pid(0x1, r3, 0x4004) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r6, &(0x7f0000000100)=0x4) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="d9a100a1110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6c}) 23:25:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 23:25:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x40000000000000) 23:25:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 23:25:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x60000000000000) 23:25:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x74}) 23:25:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @disconn_phy_link={{0x437, 0x2}, {0xc8, 0x76}}}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, 0x0, r5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000003c0)="f48a4b67e8821579ce2e5658e1535c19ef43dcecd00796428770f469fcd2b525e83c18e185c714a3bc73cafbd01e49ae6639d8178cb678d818290393d062ca5b097d977df5a9deb196923e39b3e9a13a80", 0x51}, {&(0x7f0000000440)="5a598d435efcf7149e5a6f54ed26ffdc4fe4e6e7634841219ada8fd1bff46accbaf1a6aaea09ecce66e317a30f63f450e1c2a00443e3ca0ba6a004a843b268a323ca055830f70a6d571fc27aea5ba1935cf2462afa5d3bca8528e146b9ce4451092307586963a8bb82a51548f7e9b3779c4f7dcea8d0457ef6184123e6c99b0f", 0x80}, {&(0x7f00000004c0)="b3aff38329dfc15459af247820ae9d236dae2dcd6b6936a59c2dec1a0df9c05f9faa782f46be23cdd905d66fcd8afe77348086ef7b2f546ef2202fc75cf77d50bb0c562cda04868f38e51871cbe3b43249e0f68c743acc7a87e704fc32eb28c3fd6f02e8b3b5210f9e5ae317df930064ef6c1c52ca4842facfd94e27c902303c957be884e1235eed2b5268ea6c41834fb14d4df00383ec6fe6a4272f06e51adf1fbc0fd86cc659f5542b4634e57f82dad597a67ed7545ef00cd7b10f044f1212aceb", 0xc2}, {&(0x7f00000005c0)="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", 0xfd}, {&(0x7f00000006c0)="391fbafa896f2e04ad2dc4a93f2af94de6159d2b66fe03f40c4cc203bd90640fc6e718bf6186f9b27581eb4e3b1150c227a7ebcf0fde30bdbe3363f0ca1cb72df33562f7d7e3353599a9fd8b3c51", 0x4e}, {&(0x7f0000000740)="7d9260be850308520e3dc7ae6a80de4ae26a14656efda7212c505f12ed84d90a1519e71d5746e736ad50b67c2f68093b11e669602771722db41b6f4655fa8c55e9525f4852c1e3b255f364704571ca9dd315e03983bbd563028b4990a363b33038ab09f0699141bd4ef4db72184cc5da361decdd521b82a1add7ba071035af2ab88ab41e2282ad8d9cd3b761f0ab45ecc4b85cf5e0fa396ea622a5ceaeb7f2b950bff95c1feef4dd92f7", 0xaa}], 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000161c000000000000000100000000000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x20000000}, 0x8000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x10000]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x15, 0x3bf, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], r7, r6}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401012fc, 0x0) ioctl$EVIOCGVERSION(r9, 0x80044501, &(0x7f00000002c0)=""/215) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401012fc, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x121602, 0x0) ioctl$SIOCRSGL2CALL(r10, 0x89e5, &(0x7f0000000100)) getsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0xffffff5f) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 23:25:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x80000000000000) 23:25:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7a}) 23:25:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x1, 0xeeabaff8, 0x7ff, 0x0, 0xffffffffffffffff, 0x1f, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x840, 0x9, 0x0, r4, 0x0, [], 0x0, r3, 0x0, 0x5, 0x3}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r9 = openat$cgroup_ro(r8, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401012fc, 0x0) getsockopt$packet_int(r9, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='security.apparmor\x00') ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x300}) 23:25:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x80ffff00000000) 23:25:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x8000, 0xba}, 0x90) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x500, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x2e) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) chown(0x0, r1, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB='xino=auto,workdir=./file0,nfs_export=off,workdir=./file0,index=off,redirect_dir=./file1,xino=auto,default_permissions,appraise,fscontext=root,dont_appraise,uid>', @ANYRESDEC=r1, @ANYBLOB="2c736d61636b66736861743d25395d2c646f6e745f6d6561737572652c686173682c0085bcfe88ce2cd228356993b314e3c342280be4b5eb7dc3cb19ec44298525164583dec94c358dfc224614a6415c"]) r2 = getgid() r3 = gettid() tkill(r3, 0x33) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup2(0xffffffffffffffff, r6) fstat(r6, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001f80)={0x0, @in={0x2, 0x4e22, @empty}, @ipx={0x4, 0x0, 0x1, "a82d99c6bbe9", 0x5}, @ethernet={0x6}, 0x1000, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001f40)='wg1\x00', 0x3, 0x6, 0x523}) r8 = getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80008008}, 0xc, &(0x7f00000020c0)=[{&(0x7f0000002640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x310}, {&(0x7f0000000400)={0x374, 0x18, 0x4, 0x70bd27, 0x25dfdbff, "", [@generic="19272c5243500776b6c11c355bba", @nested={0x4, 0x1}, @nested={0x151, 0xd, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @fd}, @generic="89c8c1ff333123c0261c2ebc017deecf255e99378c5fe9b900cdb61a47e03c0b04dea9c52d39fa609be3fc256ec5b6b01033f553222ec062d83a5a21a486f30d5deaf073fcb5fab14fcf0a14cd6d89eac47241", @typed={0x4, 0x13}, @generic="9542d30ad13ec7379b6c8d85865674a0d22c4cd50be7bdda32375dbb189e4aa2cc8bad6711ff35c1ae1c0957fcd3a3e68db843fe9452527c5c0a8c6f8d1b681768495a3b44b35b2b9825e401074ae15f963d79796082b232b41866a87a95b000339d0fffce0f7395d2c4d58bf41f93b8a6e037a771c2b6048cfbe1fc05937f192eb3f15eaac660a6e379ef333c4db44742c08577ab5a3b466b73501e25e136c99bc58b2806338b8875b5703326ec52bb6c9bbae480466ce54787c3e6bdd64356d2b52bee90fc9cdfa0955f00accb77ff5938210c213dcee7317ff4ad41e88b7c565c952e015d", @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@empty}]}, @generic="7ebebab5d4727086e277befe45ab956a205b80a74980a2", @nested={0x181, 0x59, 0x0, 0x1, [@generic="66b471d067b95852a860ab3014fe501858c52813cb3df510c6c26d0986dce146ffc682f6ffb699adb28d4ed4ff5ba7eca88804cba7e1d423b06bf878", @generic="e37d645d8e91e493ee749b8a1b0450d09128cbddf9a331429e71f4c396da42806dc703f5bd9c7659bae613949ab539e76b53fc5eff869a2827ba4d01c35f9a0de71dcf783ce22b9ce3f357fd2be55a14de88eb3d7168c7fca7ef6bbc94acf6cdd92995cac2f9db78a76780a9bf1952172c5a656692ee6644fd1b86c615dfb6fc41e033b89ecad2a82dd4dba6e983614ab9003bd2bf58dfd5dc393baf7283f3ba8bc902aec26b637ad2cb4910768f8e443b39a8e69f96e70cb2a75ba4798663204ddf22e3c7b2704dc9d602d3", @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x3d, 0x0, 0x0, @fd}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@empty}, @generic="2412ad7183094cbd8d75436921ba7ca2abbbbbaba2f336562dbd7fedd2e2fe371db97c0a16f3b597e492dc38f37930ebed676aad25", @typed={0xf, 0x8b, 0x0, 0x0, @str='!.@\\(:D({*\x00'}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}, @typed={0x4, 0x1a}]}, @nested={0x60, 0x54, 0x0, 0x1, [@generic="35609a67a7f01572f30d73a60ee9a6066aca7b17ce36c9aca5074a270aa60f93d9adbca417e4404320bbde7ee84206df8896b3e51af0fd2ec3525cf95f9fda1a18c430a4107b73b33e028ecccbecb43156b04809d3da21d3e392e7f5"]}]}, 0x374}, {&(0x7f0000002980)={0x3f4, 0x25, 0x10, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc2, 0x5e, 0x0, 0x0, @binary="19645c4a3f8c770032e188b73eb37235e2c2191fb552f850370bf206572a9ddb3bb86fbe34c5b69e45a5e1ac4f45a07ab49f87eae7777551d9362b4b32407ca6c3246cca2a6af7f8beadbb001d6410b8f4da23c51a7a89f5bf09f8a196a01c466bcd2dea89a4e48efee24b9913f79e4e0da89971111268617726161575600ce55c027d7ad0e412c8ea47416725b89dcd3f03dc7b4140d47f83cd68b93676a0807fdaad7d73250f5fac3cc3f0a28aa6f954c643ded790cc5a56a3dcd7ea20"}, @generic="62acec341ad001bdbdffb63e2d69c29a45b6b156bb030355c53238f23acac1530fdca7b87d7dfe2338a9b89e57a204562601989b49e62b7249519fdef701f1ec4691a93ce241c82f24afdce34c4ee812c1ea74b57a470d7311c2ceb4fcc45dddd0b58e3c2e941bb63c3484a4144b30d93030e731d96bd1c1fb9bb839c12aadf2bd7e40be7a97dcfc2792e4cd6cdfc8db62d9610f2fe103120b0810b2f1313115e054dd1dd7804afb05bb5b0e278b75c7a875a48588f4abec01b283de78b2508686bdbdeaed0b42f179c4b5ea120307732d76d5fbf84c18e75c8639d8e2b5a3a804d5b14dd8b55a818f8808cd0cf42c9749", @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x96, 0x13, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @u32=0x800}, @typed={0x8, 0x26, 0x0, 0x0, @fd}, @generic="47009f60403cdc8868c0b4861d69e9649b6a85bca2f3b28a9f304ed6af8e3ee04803073fbf4246bdbe1e6619bc8425eb1b8f31a6", @typed={0x5, 0x6e, 0x0, 0x0, @str='\x00'}, @generic="2f4e5e67a2b195d5a75b8af737e8fc09c9ef9e70878f1b634cd85924152a8b8b6907dde3782c325ef618a5652d368662db769e979590cea9daf184e6ec39", @typed={0x8, 0x4c, 0x0, 0x0, @u32=0x6}]}, @generic="df9542f2b6cec5db0fab2d0efa811f6b6ecc42675dbd62d5e272f21356c03fa6b558b5698155edd8d82ab21a425d4ff3bba87be9532486719d8125e10352e2a5252208c1c16cf043b05f4827db920746dd43c22a6d1c7b78c6d6eeb5623a377562223b0aaf24a4298d771280993da7aea79ca4ca7d4b837b8cd5709fc9d38bcdd5935746435f2fd00450cd9befa2cdf36c32541b4e480974d3b7715e282bded2409efd1fc0ab393a4311aed5324c77c1d2cb9c26e4d43085a382066cfbbc29f9781f2c00b2c17337ff3667bf116648ac1827a8dff0a089593fd1f42d2e6c901089dc6e2b17015f15a8a5de67c37361c9aa35a5", @typed={0x95, 0x36, 0x0, 0x0, @binary="9e5b1f37d70f32c0301abc0eb58407737055ff2e4d312a62684ad07f0946b4b0a0b701d6a60afccf3b22894f4d8b9f3bea62164d222cb5cb030592b5f3e20568d259e3c4b65a5a39b341395e09489b5c79b517a9af500527482332ce8cee0d339882c1fdc4389d95469aa0c55bfd1b7ae0e860c44c9290fea3f91990f83e26f865e653fce36409a806dcd12960d2c67884"}]}, 0x3f4}, {&(0x7f0000000b40)={0x1200, 0x23, 0x800, 0x70bd25, 0x25dfdbfc, "", [@nested={0x1cd, 0x65, 0x0, 0x1, [@generic="17dd181b302503c243488424e9adff3d95e9175dddbdbbd85a729c0578fbeed7371dd1e88d607f903774ec2baf77a399f250021cee464e231fbdf2074c9771c89cd92f4f0df18f97384313ef2c8c6746b6aa2e0ef72fcaf9095a7f3d1422d6bd2d5953625cb5edd151ad628172e70e97d0a73bd4408331169828e7e31b6de4c5539b340e66321d07095b4c8720dbbb01be4fb83afc7b46b561533cfd28309e6c6be66e8a5fb055561db4edf85cd975ffdf7f609a1b108759f0610502b3732f496ab6b2", @generic="b1be3c76e0ebfacf744f3a788354018acde8df240b05f7e980453bae5cea48a5f206d7d2ccc82c19655eac0bb6dee221f08df70c5315e576cfc30448adb12052b5a62048e68d47cfaeff40626093a80695a38b16d451fa7d054681f518e8612e8a56c8fc408f72aa500a25802645bc44d2deb86353be6c4d74c2599d893c6000f524556c34b3d9183398ac7009b5f38ff8fb92f56c0c684cb867f9781d660d2d96890b70a32c553ccbb6aecee2aca22daa1b00bd3e730a4f5539ae", @typed={0x8, 0x79, 0x0, 0x0, @uid}, @generic="226e266e20c33d22e283141d1dcb4db0ca6af049047d86db9e5221fe4e2483f52aa6aae592d73bb58f015fec48254a34fa5dbb69066dd61a20ae59c182e80801d8dae6"]}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x1c}, @typed={0x6, 0x29, 0x0, 0x0, @str='*\x00'}, @nested={0x4, 0x93}, @generic="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", @typed={0xc, 0x48, 0x0, 0x0, @u64=0xfffffffffffffaef}]}, 0x1200}, {&(0x7f0000001d40)=ANY=[@ANYBLOB="c80000002900100027bd7000fcdbdf2513c974bb7af6d22cbcaa615daf738f4edb676c2728244ef926f6587f743ba09c0f111e0303199af1b534d5e5769ce59360e22caafb97e3977cdf48b14eb9361865da53ecfb3c21cdaa865e2762c76a566e0e20fef7ff7c2a3e109b109392652f258d350c4b26ce90f0e317d9627d9c72e012d474213f0b859a6b63fc7fe8458b4b6279f8d5fdcded750e2a5f049da81cdfc9f666e14ca490ea2fb8d474e6318ef014817ccda6a86c18203886a671676a841771840e000000"], 0xc8}, {&(0x7f0000001e40)={0xd8, 0x3d, 0x200, 0x70bd29, 0x25dfdbfe, "", [@generic="8b8ad9e0266c38fc60965ff729c79f12b3b0d9b6031d034b40d7ee2b2540517208868a66fe5adce698c96f5b81702df94c5e6275fb341700dd2c90a54cfc55af21136fc05d1b0e97bd52162957d111241ad5b76bc3db7fd212b11f1816c4f7083a5e5445c389a9d8e4ebd046e7a07182c8d8e07b2cf1feb31d95cd6a", @nested={0x42, 0x3f, 0x0, 0x1, [@typed={0x4, 0x7d}, @generic="64ddf66b9d4882834795a6912fa00bf1fce2589462bf7008de1a571915707f675430c9bad5a7ca86c0ac5a465a43", @typed={0x4, 0x4d}, @typed={0x7, 0x27, 0x0, 0x0, @str='%@\x00'}]}, @typed={0x8, 0x8d, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xd8}, {&(0x7f0000002380)=ANY=[@ANYBLOB="4cdf25fad4563decf91636df6f63ecfef6e9387243279568f2c47208006b00000000000000000000000000004a2b1f54cd970ac470e685a15433d2633b0f226665aed614726e20b3", @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}], 0x7, &(0x7f0000002280)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r7, r8}}}], 0xa0, 0x4088}, 0x4040890) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0) r4 = syz_io_uring_complete(r1) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 23:25:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x100000000000000) 23:25:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008055}, 0x4008040) 23:25:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e23, 0x8, @local}, r3}}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) getsockopt$packet_int(r4, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x500}) [ 330.594347][T13286] user requested TSC rate below hardware speed 23:25:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x8, 0x2000}) 23:25:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x600}) 23:25:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0xfd87, 0x0, 0x0, 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000300)=[{0x45, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) r2 = syz_io_uring_complete(0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) syz_mount_image$exfat(&(0x7f0000000080)='exfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100), 0x0, 0x1}], 0x50000, &(0x7f0000000180)={[{@codepage={'codepage', 0x3d, 'macinuit'}}, {@discard='discard'}], [{@subj_type={'subj_type', 0x3d, 'gtp\x00'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) bind$isdn_base(r2, &(0x7f0000000200)={0x22, 0x40, 0x4c, 0x9, 0x6}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') 23:25:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x200000000000000) 23:25:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup2(r0, r3) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500, r4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0xb40e, 0x800, 0xd, 0x20, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401012fc, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) getsockopt$packet_int(r6, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) 23:25:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1000) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000080)=0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x101) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x700}) 23:25:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x400000000000000) 23:25:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'team_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:57 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0xfffc, 0x0, 0x10, 0x4}) 23:25:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000000180)={r1, r2+60000000}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed6056b02ce1a6808eafc0cd41d35961049bc198453268f7ddfb999dd6a3816c6dad7d5cdacbd328d573b6c0a29ad9436b6515c07bd14225154dbdeca30ca98ed0cd1e88ebfd49b734625a99ca122de18f2720a7801d38c4ad22f8ff02692bddfe0b73de33344f23a7bff8b963a5f39744a86ad6f83cdd60958750830900d64ce82b06c17c94f40e6ee15c01e58e04ae01d089a8c037f4cbde2688440f65fc34b295d34b348698d522d6e61b0c9ead3dc01865b5f3acddbeb9cb7d69732acda10e5b14ba6afe6b3d5f9cd229de6c1893186b14369a476f5c365000cc3dcb60e6505ae3904e59bf68b433c17478d724e2b1fef3cd7ece434e7ecc11794dd68639bb668aac48181348cc5b1a8b5387374222e266b8ed155116a9419468f620f139383e1ae788a0e4690c6f12815b06feebc619b25169df8f7b1e2f5fbd082ee71370ddf8c93f7383b97f2b479978f7695af2ef7b9dbeeff0a90bdd64eddca07b8e70973bc06d2b5a49d830b98d58f6475b411263596e01e31907b0d8c88e74f2747ebb93bf572c0d19ed45ec45b52b844f89a2ef93e27b35c74d060b1ea77b22"], 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) dup3(r7, r8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) dup2(r4, r9) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x58, 0x0, &(0x7f0000000380)=[@exit_looper, @request_death, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r9, @ANYBLOB="0000000000000000000000008561646600000000030000000000000000000000000000002a00000000000000852a646600000000", @ANYRES32=r10, @ANYBLOB="000000000000000006000800"], &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f0000000400)="36a150fd2aec3e9d2df9ab40c2bdbeceffd21c2b17356b640362c585403381b9b00cf577966ebcaf14d58f3b2629db3698fd418baba4b9"}) [ 331.363687][T13355] binder: 13350:13355 ioctl 80044325 20000080 returned -22 [ 331.431164][T13355] binder: 13350:13355 ioctl 80044325 20000080 returned -22 23:25:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:25:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x8000000000000000) 23:25:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8cc}) 23:25:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000180), 0x4, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup3(r2, r3, 0x0) dup2(r2, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) write$evdev(r4, &(0x7f0000000100)=[{{}, 0x12, 0x100, 0x7f}, {{0x77359400}, 0x3, 0x2, 0x20}, {{0x77359400}, 0x4, 0x1, 0xffffffff}], 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) getsockopt$packet_int(r6, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000005, 0x40010, r5, 0x0) socket$netlink(0x10, 0x3, 0x10) 23:25:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1, 0x5, 0x20, 0x400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x4, 0x1, 0x0, 0xaf, 0x4}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e21, 0x5, @loopback, 0x7}}, 0x1, 0x1000}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x20}, 0x5ed0}}, 0x5, 0x7f, 0x7, 0x6, 0x1f85}, &(0x7f0000000340)=0x98) dup2(r2, r5) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:25:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0xffffffffffffffff) 23:25:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x900}) 23:25:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0xfdffffffffff0f00) 23:25:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x90002) 23:25:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xa00}) 23:25:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800, 0x10000}, 0x40480, 0xa74c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffe00000001, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup2(r0, r3) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) ioctl$sock_bt_hci(r4, 0x400448e4, &(0x7f0000000000)="0131429db519ecc7") r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) ioctl$KDSKBLED(r5, 0x4b65, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401012fc, 0x0) getsockopt$packet_int(r8, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0) 23:25:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000002c0)=0x8, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="09e1b5c75e010000", @ANYRES16=r5, @ANYBLOB="3f02000000000000000041000000000000000c41f000001d001462726f616463617374d06c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xfffffff7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4805) 23:25:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000240)={0x800, 0xfffffffe, 0x387, 0x1e}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x20}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20040}, 0x400c0c4) syz_open_dev$tty1(0xc, 0x4, 0x1) 23:25:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0xffffffff00000000) 23:25:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3200}) 23:25:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000040)={0x7f, 0x11}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b4a, &(0x7f0000000000)={0x200, 0x0, 0x0, 0x0, 0x0, 0x7121}) 23:25:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000000c0)="9401ade900b26f4fcfd9343309bac09320bd7b4d93f7ef4a11deb2ec7a807b45a705d9d0b79e6561fe6f1d71378a65fb0d1e4379fdc1f7ac3ffc669d90b2d694b611ab2e4424c2bde0c675b5a45f09782a93347fb029ddfd87bde96cb9de8d4c2ab955c2", 0x64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0xe4) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x79a4, 0x0, 0x6b5f, 0x8, 0x400}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x9, 0x80, 0x0, 0x8, 0x1a, "96cbb0f3dc559030f1000000801aed5669dd88"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x80]}, 0x8, 0x80000) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) fcntl$dupfd(r2, 0x406, r3) ioctl$KDMKTONE(r1, 0x4b30, 0x4a3b) 23:25:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x220, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x20040000) 23:25:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xb, 0x4, 0x800, 0x9, 0x500, r2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='a rum\x00'], 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) getsockopt$packet_int(r5, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) 23:25:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) 23:25:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup2(r4, r7) dup(r7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:25:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3f00}) 23:25:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xc6) close(r2) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x8, &(0x7f00000000c0)}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111}}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r5}}, 0xc) 23:25:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b4a, &(0x7f0000000000)) 23:25:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x4800}) 23:25:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x2, 0x6c, 0x8, 0x45, 0x8, 0x2, 0xffffffff}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) [ 332.833673][T13472] IPVS: Error connecting to the multicast addr 23:25:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x80000000, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) [ 332.846251][T13472] IPVS: Error connecting to the multicast addr 23:25:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 23:25:59 executing program 4: io_setup(0x7fc, &(0x7f0000000600)) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x6001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xd8f7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x15) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f00000002c0)) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = fanotify_init(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @broadcast, 0x4e23, 0x3f00, 'none\x00', 0x0, 0x4, 0x50}, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="83b35ebdc8a92f4df46b", 0xa, 0x20004005, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @mcast2, 0x80}, 0x1c) fanotify_mark(r5, 0x2000000000000011, 0x2, 0xffffffffffffffff, 0x0) 23:25:59 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x7ff, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000800)=@deltfilter={0x86c, 0x2d, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xa, 0xfff1}, {0x15, 0xc}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x83c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_ACT={0x3f0, 0x6, [@m_ctinfo={0xac, 0xe, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x400, 0x0, 0x1000}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x80, 0xffffffffdffffff7, 0x4, 0x49}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x57c0000}]}, {0x10, 0x6, "3dffe7c1eb96752ad3759e42"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1bc, 0x8, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x6, 0x3, 0x4, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x0, 0xffffffffffffffff, 0x4, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x52, 0x20000000, 0x2, 0x10000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1a11, 0x0, 0x3, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3f, 0x64, 0xfffffffffffffff8, 0x3, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x75d5, 0x10000007, 0x6, 0x2}, 0x0, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x6, 0x8, 0xff, 0x3}, 0x4, r6}}]}, {0xb0, 0x6, "35ac62c618af957ddf0f9e96640dfcd1aab31c19ce2b5cabc7a2a509f2715bad0c35b3119e01bf38ad0327ce7478450aeae2809221ecbf034de1c55c5f868d885f5cc84e19132e15e8bcd2f01f97a3f228b77e088d2e01332300b4bc1bf7716ab17f119bca9f4d193ef740fb4da6357be4fd19c73dc862391896bd2315db14685c6fc155ec564f6aacc7da97d0c361526d869b5706724eaefc7153d60979997152787b20ceb76d29b98c997b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x90, 0x18, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0xb60a, 0x2, 0x8, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x12, 0x6, "1f609b7983effb008cbc2c3fb79a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xf4, 0x4, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, [], 0x1a}}, @TCA_CT_LABELS={0x14, 0x7, "29b409fbb2cce68d39d1799dd3988f75"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e4421336865c635742e4b5d8bd161eb0"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x55}]}, {0x5a, 0x6, "e50b51c3f74a94de8c247a548802be4b2f3e5f1eba5eb1380fa8acd8947a2af4b73a1e3ad23f83b35fb472d28f88f137e8da123693f014bd5f7106eeaa693fe5e86c2468f039e1be693e37667931c56e5feab24f924c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x5104, 0x7}, {0x80000000, 0x576, 0x7fffffff}, 0x88, 0x3, 0x6}}, @TCA_RSVP_POLICE={0x420, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x196be385, 0xffff0000, 0x7fffffff, 0xef48, 0x2, 0x9, 0x2, 0x6, 0x6, 0xfffffffd, 0x3, 0x0, 0x9, 0x159a, 0x4, 0x10000, 0x7, 0xabf, 0x1f, 0x9, 0x4c9d, 0x9, 0x7, 0x7ff, 0x5, 0x80000000, 0x3, 0x4, 0x4, 0x8000, 0x3, 0x0, 0xe6da, 0x8, 0x4, 0x3, 0x7, 0x0, 0x1ff, 0xcb, 0xfffffff8, 0xfffffff8, 0x0, 0x10000, 0x3c, 0x4, 0x5, 0x6, 0x7, 0x0, 0x7fff, 0xffff, 0x10001, 0x19b7, 0x80000001, 0x401, 0x3, 0x40, 0x7fffffff, 0x2, 0x7, 0x10000, 0x3, 0x10001, 0x0, 0x200, 0x46a1, 0x7, 0x9, 0x2, 0x3, 0x7, 0xc0e, 0x401, 0x4fd0f3, 0x1ff, 0x8, 0x1cf5, 0xffffffa1, 0x4b4, 0x7f, 0x1, 0xce3, 0x10001, 0x5, 0x100, 0x101, 0x10000, 0x1, 0x22a, 0x8, 0x3, 0x10000, 0x0, 0x6, 0x0, 0x60, 0x7, 0x7, 0x8, 0x8, 0x0, 0x5, 0x8, 0x4, 0x3, 0x2, 0x1, 0x81, 0x826, 0x3, 0x5, 0x1, 0x0, 0x7, 0xed, 0xff, 0x60, 0xfffffffd, 0x7fffffff, 0x1, 0x3, 0x8, 0xfffffffb, 0x4, 0x1ff, 0x2, 0x80000000, 0x7, 0x1, 0x1, 0x6, 0x7fff, 0x400, 0x1, 0x8d9a, 0x6, 0x1, 0x81, 0x100, 0x6, 0xffff, 0xffffffff, 0x6, 0xfffffff7, 0x8, 0x1, 0x6, 0x9, 0x1c7, 0x5, 0x2, 0x8, 0x2, 0x3, 0x5, 0x1, 0x0, 0x3, 0xb5d, 0x2b0647f, 0x3f, 0x2, 0xfffffff8, 0xac21, 0x6, 0x428be195, 0x401, 0x0, 0x2, 0x1, 0x9, 0x7, 0x1, 0x2b86a47d, 0xb0, 0x0, 0x101, 0x2, 0x2, 0x3, 0x7623, 0x8001, 0xaf1, 0x7f, 0x4, 0x7, 0x7b4f371a, 0xffff, 0x7, 0x5, 0x3, 0xfff, 0x80000001, 0x6, 0x0, 0x343ab9cd, 0x80, 0x8, 0xfffffeff, 0x9, 0x7, 0xfffffff9, 0xfffffff8, 0x7, 0x800, 0x0, 0x3c, 0x8, 0x8e, 0x401, 0xffffffc6, 0x0, 0x800, 0xff, 0x3, 0xab2d, 0xffff, 0x3, 0x2, 0x101, 0x401, 0x9138, 0x80, 0x2, 0xfff, 0x2, 0x7, 0x4c3, 0x7, 0x2d, 0x7, 0x8, 0x1, 0x0, 0x80000000, 0x5, 0x9, 0x3, 0x101, 0x1, 0x4, 0x3, 0x5, 0x5, 0x53, 0x3, 0x6, 0x101, 0xba, 0x80000000, 0x10001, 0x65, 0x401, 0x10001, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xeb}]}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x240080d0}, 0x800) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/157, 0x9d) 23:25:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x4, 0x4, 0x9, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000090000000d0001006d61746368616c6c000000000c00020008000300020000002b5dfc522c1e8faf6766510816a3d431e3f5aa4609a82e76e9c4422f4924dc268d66e94eae041e8a1ed983b0de9f8e94c51fd1c52e3c4ca8288aa3fc2685afe0f5d246d48ec8f6c2134c18e27ca7e4e0510146bfc0a17b2d8e290b1e5d1e084cf6b87d8f4afec5c824e59e14ef33668938ab70498d9aa336931fad44c036311bc937f5aa6f6fe7cc1b20353f8aefc8d979730e"], 0x40}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) chown(0x0, r7, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)={[{@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}], [{@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r7}}, {@smackfshat={'smackfshat', 0x3d, '%9]'}}, {@dont_measure='dont_measure'}, {@hash='hash'}]}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x1ff, 0x4e23, 0x101, 0x2, 0x20, 0x0, 0x5e, r6, r7}, {0x7, 0x7, 0x3fb, 0x73, 0x6, 0x80000001, 0x1, 0x3}, {0x3f, 0x7, 0x0, 0x9}, 0x3f, 0x6e6bb6, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x3504, 0x0, 0x2, 0x0, 0x100, 0x80}}, 0xe8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:25:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x4c00}) 23:25:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x200}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x50, r2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x80) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r7, 0x20, 0x1}, 0xc) [ 333.164173][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.239770][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000080)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xff00000a, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r3, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x2}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x8840) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x42081, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) [ 333.270514][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.298498][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401012fc, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000100)=""/108) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8100, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) 23:25:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) [ 333.347989][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) syz_open_pts(r0, 0x80000) [ 333.349941][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_LABELS_MASK={0x8, 0x17, [0x9bc]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80020}, 0x11) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}) 23:25:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0xe2, @loopback, 0xc3}}, 0x1ff, 0xcc, 0x4, 0x8b7, 0x3, 0x101, 0x81}, 0x9c) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:25:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) fadvise64(0xffffffffffffffff, 0x72, 0x2, 0x2) 23:25:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6800}) 23:25:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000300)=0x320000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffe62, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x4041) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x19, 0x4, 0x800, 0x22, 0x0, 0xffffffffffffffff, 0x8001, [], r5, r2}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) getsockopt$packet_int(r6, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:25:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xa2}) 23:25:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$VT_RESIZEX(r1, 0x4b4a, &(0x7f0000000040)={0x0, 0x8e66, 0x0, 0x0, 0x0, 0x2}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/196) [ 333.720330][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:26:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6c00}) [ 333.832949][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:26:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(r4, r5, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v1={0x2, "28a3"}, 0x3, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1a4a58eb1086e0139a41d66eaa"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) 23:26:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3ff, 0x131302) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) r3 = gettid() tkill(r3, 0x33) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1b) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x6, 0x46c, 0xfff, 0x84800, r2}) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) 23:26:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x81, 0xfffd, 0x0, 0x7}) 23:26:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0xfffffffffffffebf) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) sendto$unix(r4, &(0x7f0000000100)="1044cd74bf1bf27113163f832bed011d4aa9d6841ea78ddd1cc1c58c524c95a56feb3dff85d4a9d553a03abeccc13f2fc5666c152f1db577f55ff66be145cfff5cff52e8c338c82fd13c8019127599b018681ba8bf9d1272790e0fc2c3ff55e52bc21dd579bb62b6fe97e480a8e7cbd4bfedbc3635a6dd9a6614753fc75971aade8db43c70782cec295d3a7cc288", 0x8e, 0x850, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:26:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7400}) [ 334.282681][ T8184] Bluetooth: hci0: command 0x0406 tx timeout [ 334.288868][ T8184] Bluetooth: hci1: command 0x0406 tx timeout 23:26:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200050694c5d896e53038d8ed"], 0x14}}, 0x0) 23:26:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9c0000, 0xa41, 0x92, r0, 0x0, &(0x7f0000000080)={0x9a0915, 0x8, [], @p_u8=&(0x7f0000000040)=0x2}}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800}, 0x40480, 0xa74c}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup2(r3, r6) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0x6, 0xc7, 0x3, 0x40, 0x9, 0x9, 0x1, 0x1, 0x7, 0x20, 0xfe, 0x7, 0xff, 0xc0}, 0xe) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r6, &(0x7f0000000100)={0x40000008}) 23:26:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x2, 0x4, 0x800, 0x9, 0x500, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000180)=0x1f, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000080)={0x3a0000, 0x4, 0x91d, r5, 0x0, &(0x7f0000000040)={0x9a0913, 0xfff, [], @p_u32=&(0x7f0000000000)=0x80}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x4, 0x100000}) 23:26:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8040, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) 23:26:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000000)) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:26:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7a00}) 23:26:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xcc08}) 23:26:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x4, 0xfffffff9, 0x9}, 0x40) r3 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 23:26:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0xa9, 0xa}, 0x18) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x2, 0x1, 0x6ddf}], 0x18) 23:26:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) recvfrom(r1, &(0x7f0000000040)=""/82, 0x52, 0x2000, &(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x10842}, 0x80) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401012fc, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000000)) 23:26:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = gettid() tkill(r1, 0x33) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)=r1) socket$kcm(0x29, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup3(r5, r6, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffff1f}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x20004840) r7 = dup2(r2, r6) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000080)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:26:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xff00}) 23:26:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x8}, 0x40) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x20c401, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x306) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000002c0)={0xffff965b, 0x0, 0x1, 'queue1\x00', 0xdacd}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r2, 0x100, 0x10}, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x1ff, r2}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b4a, &(0x7f0000000000)={0xfffd, 0x0, 0x2081, 0x0, 0xfffc}) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)=""/149) r4 = open(&(0x7f00000003c0)='./file0\x00', 0x20480, 0x1b9) fgetxattr(r4, &(0x7f0000000400)=@random={'security.', 'queue1\x00'}, &(0x7f0000000440)=""/235, 0xeb) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000040)) 23:26:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xff7f}) 23:26:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401012fc, 0x0) getsockopt$packet_int(r3, 0x107, 0x27f4b2a3f47bd7bf, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) 23:26:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2c081, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1407, 0x111, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x8, 0x2}) 23:26:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401012fc, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup3(r3, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401012fc, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f00000001c0)={0x8, {{0x2, 0x4e22, @private=0xa010101}}}, 0x88) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401012fc, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x21}, 0x200000c0) [ 335.657452][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:26:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 23:26:01 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000340)=0x4, 0x4) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000040)={0x35, 0x8001, 0x7ff}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) 23:26:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x3ff, 0x8, 0x100000000, 0xd0}) [ 335.791033][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:26:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 23:26:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xf11}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4c8d00, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000480)={0x3, 0x1, 0x1a, 0x0, 0x16a, &(0x7f0000000080)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401012fc, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x81, 0x7, 0x80000001}, &(0x7f0000000500)=0x10) 23:26:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401012fc, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000)=0x3, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x10000, 0x7f, {}, {0x5, 0x0, 0x40, 0x9, 0x18, 0xfa, "c3f3c674"}, 0x7ff, 0x6, @fd=r0, 0xffff, 0x0, r3}) fsetxattr(r8, &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)='/dev/kvm\x00', 0x9, 0x7) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) 23:26:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x2}) 23:26:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8, 0xfffd}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0xb5, 0x0, &(0x7f0000000040)}) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000480), 0x4) [ 336.179507][T13709] ================================================================== [ 336.179600][T13709] BUG: KASAN: slab-out-of-bounds in fbcon_get_font+0x2f4/0x6f0 [ 336.179618][T13709] Read of size 8 at addr ffff8880916a6710 by task syz-executor.0/13709 [ 336.179624][T13709] [ 336.179647][T13709] CPU: 0 PID: 13709 Comm: syz-executor.0 Not tainted 5.8.0-next-20200812-syzkaller #0 [ 336.179658][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.179664][T13709] Call Trace: [ 336.179688][T13709] dump_stack+0x18f/0x20d [ 336.179709][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.179725][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.179748][T13709] print_address_description.constprop.0.cold+0xae/0x497 [ 336.179769][T13709] ? rwlock_bug.part.0+0x90/0x90 [ 336.179790][T13709] ? vprintk_func+0x97/0x1a6 [ 336.179811][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.179826][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.179841][T13709] kasan_report.cold+0x1f/0x37 [ 336.179860][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.179877][T13709] check_memory_region+0x13d/0x180 [ 336.179892][T13709] memcpy+0x20/0x60 [ 336.179909][T13709] fbcon_get_font+0x2f4/0x6f0 [ 336.179929][T13709] ? fbcon_resize+0x610/0x610 [ 336.179947][T13709] con_font_op+0x1f5/0x1110 [ 336.179967][T13709] ? lock_downgrade+0x830/0x830 [ 336.179981][T13709] ? con_write+0xb0/0xb0 [ 336.180007][T13709] ? __might_fault+0x190/0x1d0 [ 336.180030][T13709] vt_ioctl+0x18fe/0x2c20 [ 336.180047][T13709] ? lock_downgrade+0x7a1/0x830 [ 336.180063][T13709] ? vt_waitactive+0x350/0x350 [ 336.180081][T13709] ? trace_hardirqs_on+0x5f/0x220 [ 336.180097][T13709] ? lockdep_hardirqs_on+0x76/0xf0 [ 336.180121][T13709] ? tomoyo_execute_permission+0x470/0x470 [ 336.180137][T13709] ? lock_acquire+0x1f1/0xad0 [ 336.180153][T13709] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 336.180167][T13709] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 336.180196][T13709] ? vt_waitactive+0x350/0x350 [ 336.180214][T13709] tty_ioctl+0x1019/0x15f0 [ 336.180231][T13709] ? tty_fasync+0x390/0x390 [ 336.180246][T13709] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 336.180265][T13709] ? do_vfs_ioctl+0x27d/0x1090 [ 336.180282][T13709] ? generic_block_fiemap+0x60/0x60 [ 336.180301][T13709] ? _copy_to_user+0x126/0x160 [ 336.180327][T13709] ? __fget_files+0x294/0x400 [ 336.180350][T13709] ? bpf_lsm_file_ioctl+0x5/0x10 [ 336.180364][T13709] ? tty_fasync+0x390/0x390 [ 336.180383][T13709] __x64_sys_ioctl+0x193/0x200 [ 336.180404][T13709] do_syscall_64+0x2d/0x70 [ 336.180423][T13709] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.180437][T13709] RIP: 0033:0x45d189 [ 336.180455][T13709] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.180465][T13709] RSP: 002b:00007fc1ffb67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.180483][T13709] RAX: ffffffffffffffda RBX: 000000000000e540 RCX: 000000000045d189 [ 336.180492][T13709] RDX: 0000000020000440 RSI: 0000000000004b6b RDI: 0000000000000003 [ 336.180502][T13709] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 336.180511][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 336.180522][T13709] R13: 00007ffd195cffbf R14: 00007fc1ffb689c0 R15: 000000000118cf4c [ 336.180542][T13709] [ 336.180551][T13709] Allocated by task 9323: [ 336.180567][T13709] kasan_save_stack+0x1b/0x40 [ 336.180581][T13709] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 336.180593][T13709] __kmalloc+0x1a8/0x320 [ 336.180608][T13709] fbcon_set_font+0x34f/0x8b0 [ 336.180620][T13709] con_font_op+0xd25/0x1110 [ 336.180634][T13709] vt_ioctl+0x1be1/0x2c20 [ 336.180645][T13709] tty_ioctl+0x1019/0x15f0 [ 336.180659][T13709] __x64_sys_ioctl+0x193/0x200 [ 336.180673][T13709] do_syscall_64+0x2d/0x70 [ 336.180688][T13709] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.180694][T13709] [ 336.180699][T13709] Last call_rcu(): [ 336.180714][T13709] kasan_save_stack+0x1b/0x40 [ 336.180729][T13709] kasan_record_aux_stack+0x82/0xb0 [ 336.180740][T13709] call_rcu+0x14f/0x7e0 [ 336.180755][T13709] perf_event_release_kernel+0xa24/0xe00 [ 336.180768][T13709] perf_release+0x33/0x40 [ 336.180778][T13709] __fput+0x285/0x920 [ 336.180790][T13709] task_work_run+0xdd/0x190 [ 336.180806][T13709] exit_to_user_mode_prepare+0x195/0x1c0 [ 336.180822][T13709] syscall_exit_to_user_mode+0x59/0x2b0 [ 336.180838][T13709] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.180843][T13709] [ 336.180849][T13709] Second to last call_rcu(): [ 336.180866][T13709] kasan_save_stack+0x1b/0x40 [ 336.180883][T13709] kasan_record_aux_stack+0x82/0xb0 [ 336.180897][T13709] call_rcu+0x14f/0x7e0 [ 336.180915][T13709] netlink_release+0xd43/0x1cf0 [ 336.180929][T13709] __sock_release+0xcd/0x280 [ 336.180942][T13709] sock_close+0x18/0x20 [ 336.180954][T13709] __fput+0x285/0x920 [ 336.180967][T13709] task_work_run+0xdd/0x190 [ 336.180982][T13709] exit_to_user_mode_prepare+0x195/0x1c0 [ 336.180995][T13709] syscall_exit_to_user_mode+0x59/0x2b0 [ 336.181011][T13709] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.181015][T13709] [ 336.181027][T13709] The buggy address belongs to the object at ffff8880916a6000 [ 336.181027][T13709] which belongs to the cache kmalloc-2k of size 2048 [ 336.181040][T13709] The buggy address is located 1808 bytes inside of [ 336.181040][T13709] 2048-byte region [ffff8880916a6000, ffff8880916a6800) [ 336.181045][T13709] The buggy address belongs to the page: [ 336.181063][T13709] page:0000000088f032d0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x916a6 [ 336.181075][T13709] flags: 0xfffe0000000200(slab) [ 336.181097][T13709] raw: 00fffe0000000200 ffffea0002a294c8 ffffea0002490548 ffff8880aa040800 [ 336.181116][T13709] raw: 0000000000000000 ffff8880916a6000 0000000100000001 0000000000000000 [ 336.181123][T13709] page dumped because: kasan: bad access detected [ 336.181128][T13709] [ 336.181134][T13709] Memory state around the buggy address: [ 336.181146][T13709] ffff8880916a6600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 336.181158][T13709] ffff8880916a6680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 336.181170][T13709] >ffff8880916a6700: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.181176][T13709] ^ [ 336.181197][T13709] ffff8880916a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.181210][T13709] ffff8880916a6800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.181217][T13709] ================================================================== [ 336.181223][T13709] Disabling lock debugging due to kernel taint [ 336.182053][T13709] Kernel panic - not syncing: panic_on_warn set ... [ 336.182073][T13709] CPU: 0 PID: 13709 Comm: syz-executor.0 Tainted: G B 5.8.0-next-20200812-syzkaller #0 [ 336.182081][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.182086][T13709] Call Trace: [ 336.182105][T13709] dump_stack+0x18f/0x20d [ 336.182122][T13709] ? fbcon_get_font+0x2b0/0x6f0 [ 336.182138][T13709] panic+0x2e3/0x75c [ 336.182154][T13709] ? __warn_printk+0xf3/0xf3 [ 336.182172][T13709] ? preempt_schedule_common+0x59/0xc0 [ 336.182198][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.182215][T13709] ? preempt_schedule_thunk+0x16/0x18 [ 336.182235][T13709] ? trace_hardirqs_on+0x55/0x220 [ 336.182259][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.182275][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.182289][T13709] end_report+0x4d/0x53 [ 336.182304][T13709] kasan_report.cold+0xd/0x37 [ 336.182322][T13709] ? fbcon_get_font+0x2f4/0x6f0 [ 336.182339][T13709] check_memory_region+0x13d/0x180 [ 336.182353][T13709] memcpy+0x20/0x60 [ 336.182370][T13709] fbcon_get_font+0x2f4/0x6f0 [ 336.182388][T13709] ? fbcon_resize+0x610/0x610 [ 336.182405][T13709] con_font_op+0x1f5/0x1110 [ 336.182422][T13709] ? lock_downgrade+0x830/0x830 [ 336.182434][T13709] ? con_write+0xb0/0xb0 [ 336.182452][T13709] ? __might_fault+0x190/0x1d0 [ 336.182470][T13709] vt_ioctl+0x18fe/0x2c20 [ 336.182486][T13709] ? lock_downgrade+0x7a1/0x830 [ 336.182502][T13709] ? vt_waitactive+0x350/0x350 [ 336.182520][T13709] ? trace_hardirqs_on+0x5f/0x220 [ 336.182535][T13709] ? lockdep_hardirqs_on+0x76/0xf0 [ 336.182555][T13709] ? tomoyo_execute_permission+0x470/0x470 [ 336.182571][T13709] ? lock_acquire+0x1f1/0xad0 [ 336.182587][T13709] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 336.182602][T13709] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 336.182618][T13709] ? vt_waitactive+0x350/0x350 [ 336.182631][T13709] tty_ioctl+0x1019/0x15f0 [ 336.182647][T13709] ? tty_fasync+0x390/0x390 [ 336.182662][T13709] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 336.182678][T13709] ? do_vfs_ioctl+0x27d/0x1090 [ 336.182696][T13709] ? generic_block_fiemap+0x60/0x60 [ 336.182711][T13709] ? _copy_to_user+0x126/0x160 [ 336.182733][T13709] ? __fget_files+0x294/0x400 [ 336.182751][T13709] ? bpf_lsm_file_ioctl+0x5/0x10 [ 336.182764][T13709] ? tty_fasync+0x390/0x390 [ 336.182781][T13709] __x64_sys_ioctl+0x193/0x200 [ 336.182798][T13709] do_syscall_64+0x2d/0x70 [ 336.182819][T13709] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.182833][T13709] RIP: 0033:0x45d189 [ 336.182851][T13709] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.182860][T13709] RSP: 002b:00007fc1ffb67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.182876][T13709] RAX: ffffffffffffffda RBX: 000000000000e540 RCX: 000000000045d189 [ 336.182887][T13709] RDX: 0000000020000440 RSI: 0000000000004b6b RDI: 0000000000000003 [ 336.182897][T13709] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 336.182907][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 336.182917][T13709] R13: 00007ffd195cffbf R14: 00007fc1ffb689c0 R15: 000000000118cf4c [ 336.183994][T13709] Kernel Offset: disabled